When connected equipment becomes a cybersecurity risk

Recent cyberattacks on supermarket refrigeration systems across Europe show how unauthorised and malicious access to connected equipment can disrupt day-to-day operations. Affected stores have had to remove food after their cooling systems were interfered with. Such attacks can cause food to spoil, resulting in financial losses for retailers and disruption for their customers.

For equipment manufacturers, connected equipment is an important part of their digitalisation strategy, enabling services such as remote monitoring and support. The challenge is to retain these benefits while controlling who can access operational systems.

Remote access needs clear boundaries

Remote access helps service teams diagnose faults, receive alarms and adjust settings. This access must be secured to prevent unauthorised use. Internet exposure, weak access controls and insecure remote connections can create opportunities for attackers.

These incidents underline why manufacturers and operators need to review how their equipment is connected, who can access it and how that access is protected.

Start with the path to the equipment

Manufacturers, operators and service partners should agree who manages remote access and who can change settings. Access should follow the principle of least privilege: give users and systems only the access they need, and withdraw it when it is no longer required.

Zero Trust Network Access (ZTNA) applies this approach to remote connections, requiring users and systems to be authenticated and authorised for access to specific resources rather than trusting them simply because they are on the network.

Network separation can help limit exposure between sites. A dedicated cellular connection can also remove dependence on the local site network. However, cellular connectivity alone does not secure communication with the equipment. It must be configured and managed alongside access controls and other layers of security.

A managed connection for installed equipment

Cobira SafeConnect gives new and existing equipment a managed cellular connection to the manufacturer’s systems, independently of the local site network. It combines a gateway, multi-network connectivity and private networking. Cobira handles the setup and ongoing management of the connection.

SafeConnect uses private APNs and network isolation to keep equipment away from direct exposure to the public internet. Secure connections to the manufacturer’s systems are established through private network peering or IPSec tunnels. Device allowlisting and access revocation provide additional control.

SafeConnect helps reduce connectivity-related risks through private cellular connectivity, network isolation and remote access based on Zero Trust principles. Cobira works closely with customers to ensure these measures form part of a wider security approach, alongside secure software, regular updates and appropriate access management.