Thousands of Critical Control Systems Found Exposed Online with Minimal Protection
Security researchers discovered that thousands of control systems for essential services are reachable via web browsers, often protected only by simple usernames or no passwords at all.
The investigation revealed that a wide range of systems—including supermarket refrigeration, IVF lab equipment, wind-turbine de-icing, and ventilation in voting halls—can be accessed through standard browsers. Many of these installations lack robust authentication, relying solely on basic credentials or none. The exposed platforms support infrastructure deemed vital to public welfare. John Billow, head of the National Cybersecurity Center, warned that such exposure is unacceptable and urged immediate remediation.
Why it matters
Unprotected critical systems could be hijacked, disrupting essential services and endangering public safety.
In this story
