Healthcare industry warned following cyberattack on French blood bank : NPR

Key Points:

• Health ISAC issued a security alert about a wave of cyberattacks targeting refrigeration controllers, including an incident affecting the French Blood Establishment, highlighting risks to healthcare where temperature control is critical for blood and vaccines.
• The FBI, CISA, HHS, and USDA released a fact sheet emphasizing the critical nature of industrial refrigeration systems across sectors and warning of global cyber threats targeting these systems, which protect food, medicine, and other sensitive products.
• Multiple actors are suspected, with Iran linked to attacks in Israel and possibly U.S. military bases, while pro-Russian hacking groups claim responsibility for European attacks; however, experts remain cautious about these claims due to lack of conclusive evidence.
• Vulnerabilities include widespread exposure of refrigeration controllers to the internet, security flaws in major brands, challenges in patching operational technology without risking downtime, and contractual remote access requirements that increase risk.
• Health ISAC recommends eliminating public internet exposure, enforcing network segmentation, installing hardware safeguards, training staff for manual control, and maintaining offline backups, while emphasizing the importance of international information sharing to prevent and mitigate attacks.