How vulnerable is Cyprus to a cyberattack on supermarket refrigerators, as has happened in Europe and Greece, when hackers “struck” by raising the temperatures and destroying thousands of products.
Speaking on the Alpha Kalimera show, the Secretary of the Pancyprian Retail Trade Association, Marios Antoniou, stated that such an incident could also occur in Cyprus—a prospect that has alarmed the industry—but he assured viewers that preventive measures are being taken.
ΣΧΕΤΙΚΑ ΑΡΘΡΑ
“Any system, no matter how technologically advanced it may be, as you can imagine, carries risks. Since this has happened in so many countries abroad, as you can imagine, it could happen in Cyprus as well. What happened with the supermarket freezers is a very serious incident—one that has not only concerned us but has also alarmed us.”
He points out that all necessary measures are being taken, as he recognizes the importance of prevention.
“We must all reassess the systems we have in place, and each business must view the issue of safety systems not as an expense but as an investment, because if such a crisis occurs, as you can imagine, the damage will be many times greater than any investment.”
When asked if there is a way for refrigeration systems to alert users to temperature fluctuations, Mr. Antoniou explains that there is; however, in the event of a “hacker attack,” there is a risk that the system could be compromised in a way that displays a temperature other than the actual one. He emphasizes that, in addition to the readings from electronic systems, regular manual temperature checks should be conducted by human operators to ensure compliance with temperature specifications.
Dinos Pastos, a cybersecurity expert, underscored the need to strengthen cybersecurity in businesses, organizations, and in everyday internet use, citing incidents of cyberattacks and hacker interference in connected systems, such as cold storage rooms.
As he explained, technology now allows for remote control of devices and systems via the internet. However, when the necessary protective measures are not implemented, security vulnerabilities arise that can be exploited by third parties.
Mr. Pastos noted that such attacks do not necessarily require specialized knowledge or particularly sophisticated tools. In many cases, he said, a simple online scan may be enough to identify systems that are exposed and protected by weak passwords or inadequate security measures.
Commenting on the incidents involving cold storage facilities, he noted that such attacks may have various motives, ranging from financial and political to hacker groups demonstrating their capabilities. He did not rule out the possibility that some attacks are carried out simply to cause disruption and demonstrate that the perpetrators can gain access to systems.
“A cyberattack has many objectives,” he noted, adding that in some cases, attacks are intended to cause chaos, directly affecting citizens’ daily lives, commerce, and the operations of organizations.
He made special mention of smart devices (the Internet of Things), which are now widely used in both homes and businesses. From vacuum cleaners and refrigerators to light bulbs and other household appliances, more and more devices are connected to the internet and can be controlled remotely.
Mr. Pastos warned that these devices could serve as an easier point of entry for a hacker into a broader network.
As he explained, an attacker could exploit a vulnerable smart device to gain access to other systems within an organization. For this reason, he emphasized, cybersecurity should not be limited to computers and servers alone, but should cover every device connected to the network.
At the same time, he underscored the importance of regular software updates, the use of strong passwords, and the implementation of additional protective measures, such as VPNs, so that access to systems is granted only to authorized individuals.
He also emphasized that organizations must know at all times which devices are connected to their networks and who has access to them.
As he noted, it is to be expected that vulnerabilities will be identified in a system from time to time. What is important, however, is to respond immediately and resolve the issues so that no “open doors” remain for potential attackers.
He also emphasized that device security must be a key criterion when selecting and purchasing them. As he explained, some manufacturers place greater emphasis on low cost than on maintenance and regular security updates for their products. This can create risks, especially when devices remain connected to the internet for long periods of time without supervision.
“Enlisting” white-hat hackers
Dinos Pastos also suggested enlisting specialized professionals to audit systems before they become targets of malicious attacks. He mentioned two key methods: regular security audits and vulnerability discovery reward programs, known as “bug bounties.”
Through such programs, companies and organizations offer financial rewards to experts who, with their permission and under specific conditions, attempt to identify vulnerabilities in their systems. In this way, organizations are able to fix problems before malicious users can exploit them.
Mr. Pastos also noted the distinction between malicious hackers and so-called “white hat hackers”—that is, experts who use their knowledge to protect systems rather than to breach them.
As he noted, many people involved in hacking start out of curiosity and a desire to test their abilities. The goal is to put their knowledge to good use.
“It’s like school. You gently guide a student who’s a little unruly and turn them into the best student in the class, if you pay attention to them.”
Mr. Pastos points out that cybersecurity cannot be treated as a routine procedure or as an issue that concerns only IT specialists. It requires constant monitoring, prevention, proper system maintenance, and the utilization of people with the necessary knowledge, so that digital threats can be addressed before they cause serious consequences.
