Thousands of Swedish Industrial Control Systems Vulnerable to Cyberattacks

A recent investigation by SVT Nyheter exposes critical cybersecurity vulnerabilities in Sweden's industrial control systems that manage essential societal functions. More than 3,800 IP addresses linked to these systems are publicly accessible online, with over 2,000 lacking any identifiable security measures beyond rudimentary protections such as usernames and passwords. Alarmingly, some systems do not require passwords at all, amplifying the risk of exploitation.

John Billow, head of the National Cyber Security Center, highlighted the seriousness of these security gaps, noting that exposing these systems on the internet without robust protection layers invites significant cyber risks. Among the vulnerable controls are refrigeration systems in grocery stores, ventilation systems in polling stations, IVF laboratory equipment, and de-icing systems for wind turbines.

Investigations have revealed that many of these systems are accessible through standard web browsers, compounding the dangers. Past real-world incidents, including a hacking case in Norway where dam gates were remotely manipulated via exposed controls, underscore the potential severity of attacks on such infrastructure.

The Swedish National Cyber Security Center and the Civil Defense Agency have repeatedly warned about these vulnerabilities over several years, urging immediate removal of unnecessary internet connectivity to safeguard critical services. Their message emphasizes that basic authentication is insufficient for protecting systems vital to societal functions.

This exposé calls attention to Sweden’s urgent need to implement stronger cybersecurity protocols for industrial control systems to mitigate threats that could disrupt essential services and cause serious societal consequences.