Science & Tech · Cybersecurity · 5 hrs ago
German cyber agency warns operators of small connected systems
Germany’s BSI warned operators of small connected industrial systems after cooling controls were attacked in France.
The systems include solar inverters, individual wind turbines, cooling equipment and drinking-water supply sites.
Many are not formally classed as critical infrastructure, so they may not face specific cybersecurity rules.
The BSI says internet-connected controls can be targets for destructive sabotage, and that weak passwords may have been set before some systems were delivered.
The agency recommends disconnecting systems from the internet where possible, and using protected remote access, access lists and software updates.
The attack in France was not known to have affected German markets, and food supplies in Germany remained unaffected.
From December 2027, EU rules will require manufacturers of connected devices to meet stronger security obligations before products are delivered.
Germany’s Federal Office for Information Security (BSI) has urged operators of small connected industrial facilities to secure their systems.
The agency published practical recommendations on Tuesday for operators of facilities including solar inverters, cooling systems and drinking-water supply points.
It says the advice includes disconnecting systems from the internet, using protected remote access and installing updates.
The warning follows an attack in France in which internet-accessible cooling systems that had not been patched were manipulated on a large scale.
The BSI says the recommendations are not limited to the French incidents and are intended to help prevent destructive sabotage.
- Who
- Germany’s Federal Office for Information Security (BSI) urged operators of small connected industrial facilities to improve security.
- What
- The BSI published practical recommendations for securing connected systems.
- When
- The recommendations were published on Tuesday, 13 October 2026.
- Where
- Germany; the warning follows attacks on cooling systems in France.
- Why
- The BSI says insecure systems can provide openings for sabotage, and that basic security measures could help prevent attacks.
This story does not have two clearly opposing sides.
An attack in France manipulated unpatched cooling systems that were reachable from the internet.
The BSI published practical security recommendations for operators of small and very small industrial facilities.
Stricter due-diligence requirements for manufacturers of connected devices are due to apply under the Cyber Resilience Act.
- Advice published
- Tuesday, 13 October 2026
- Agency
- Germany’s Federal Office for Information Security (BSI)
- Examples of systems
- Solar inverters, cooling systems, individual wind turbines and drinking-water supply points
- French cooling-system controls
- Copeland, Danfoss and Dixell
- Cyber Resilience Act requirements
- Due to apply from December 2027
Related
OpenAI engineer charged after recording device found in executive conference room
41 mins ago · 36 sources
U.S. charges 14 over North Korean remote-work scheme
31 mins ago · 7 sources
Cyberattack disrupts refrigeration at hundreds of French supermarkets
2 hrs ago · 47 sources
Hack of emergency alert system may expose data from 3.13 million email addresses
1 hr ago · 3 sources
What people are saying
This attack could have hit any country and could be copied at any time.
Such entry points practically invite sabotage.
The most important and at the same time simplest protection is to disconnect the systems from the internet.