Honestly, it’s for the best that this crap is happening now, instead of at some point in the middle of a conflict. Hopefully the idiotic companies start figuring out security matters.
Some MBA twat: “IT layoffs saved us €400,000/yr”
Some CEO twat: “…but cost the company €25,000,000 this year alone.”
Nah, that CEO agrees with the MBA twat and appears entirely clueless that this loss was cause by his bad policies in procurement and IT governance.
We’ve built a continent where a supermarket freezer can be remotely turned into a sauna. The scary part isn’t just sabotage: it’s how many essential services have become internet appliances without an equally serious plan for what happens when the internet turns hostile.
That’s the real breach. The fact that a fridge was made with no manual override control.
Every piece of industrial machinery has 3 settings on a large accessible control panel. OFF, AUTO and ON.
The lack of the ON and OFF functions should be illegal for all equipment.
yeah we need to patch our shit and take it security actually seriously finally
Scada-systems were always held together by hope and prayer. I wrote about this 15 years ago, same issues. Shodan will happily show you internet connected control systems and has shown them for 2 decades.
Companies do not care about security as long as they are not being held liable.
So… The fridges are still connected to the internet? Are we fucking stupid or what?
Yes and yes.
I suspect that we will start seeing a shift back from putting critical equipment in the cloud or running them directly connected to the internet, to a more secure onprem solution.
The cloud ain’t going anywhere, but some equipment will disconnected from it, and have an onprem box that monitors it, with the ability to send alert emails but little else access outside the building, there will be more investments into network security by sectors that hasn’t really dealt with that before.
💯 The future probably isn’t cloud versus on premises, but deciding which systems should never accept commands from outside the building. A freezer can email you that it’s failing without giving someone on another continent permission to defrost it. Apparently that’s now a cybersecurity strategy.
