Fwd from @ hacking instructions from Swedish state TV One of the best ways to organize a large-scale cyber attack on infrastructure is to get journalists from a state TV channel to write a detailed guide with a vulnerability map. The Swedish public broadcaster SVT in early October published an investigation showing that thousands of critical systems in the kingdom sit on the open Internet without basic protection. And it also appears to have played a role in a series of recent mass cooling system hacks across Europe. Journalists counted over 3,800 open IP addresses - from ventilation systems in polling stations and heating in government buildings to refrigeration in IVF labs and supermarkets. In most cases, access was only protected by factory default logins and passwords, and in some institutions, access to settings was open to anyone. No one seems bothered that reporters are literally broadcasting far and wide that industrial controllers and refrigerators operate with factory default passwords. In other words, they actually published a cheat sheet ready for hacking. And when the cooling units predictably began to fail across Europe, the journalists proudly announced that "we warned about this back in October. “Well, European cyber security does not need external enemies with such whistleblowers. The European - on the brink of the death of Europe, support us with an original message.

Fwd from @ hacking instructions from Swedish state TV One of the best ways to organize a large-scale cyber attack on infrastructure is to get journalists from a state TV channel to write a detailed guide with a vulnerability map. The Swedish public broadcaster SVT in early October published an investigation showing that thousands of critical systems in the kingdom sit on the open Internet without basic protection. And it also appears to have played a role in a series of recent mass cooling system hacks across Europe. Journalists counted over 3,800 open IP addresses - from ventilation systems in polling stations and heating in government buildings to refrigeration in IVF labs and supermarkets. In most cases, access was only protected by factory default logins and passwords, and in some institutions, access to settings was open to anyone. No one seems bothered that reporters are literally broadcasting far and wide that industrial controllers and refrigerators operate with factory default passwords. In other words, they actually published a cheat sheet ready for hacking. And when the cooling units predictably began to fail across Europe, the journalists proudly announced that "we warned about this back in October. “Well, European cyber security does not need external enemies with such whistleblowers. The European - on the brink of the death of Europe, support us with an original message.