Skipping or delaying system and firmware updates increases the risk of cyberattacks for businesses of all sizes.

If keeping software up to date isn’t a top priority for your business, consider the hundreds of French supermarkets whose refrigeration units were recently targeted in a cyberattack.

Hackers manipulated refrigeration controls overnight, causing temperatures in some fridges and freezers to rise to 122° F. Losses are estimated to reach tens of millions of euros due to spoiled food. Some stores also reported fires. According to the manufacturer of the controllers, outdated units no longer receiving security updates and units running on outdated firmware may have provided the way in for hackers.

Whether your business relies on just a laptop and a phone or uses million-dollar manufacturing equipment, an incident like this highlights the importance of keeping the software and firmware that powers your equipment and applications apps up to date.

Turn on automatic updates

Hackers continually seek out software vulnerabilities and cyberattacks remain an ongoing threat. AI tools can help scammers create more convincing phishing messages—faster than ever. At the same time, reputable software companies routinely issue updates or add new security features to help protect against attacks. However, those updates can’t protect your devices if you don’t install them.

Turn on automatic updates for operating systems, web browsers and plug-ins, security tools and business applications such as accounting and project management software.

If an update prompts you to restart your device, don’t skip this step. Restart it to ensure the updates are installed.

Verify that updates have been installed. Automatic updates often require a device to be connected to Wi-Fi, connected to power, be on at a specific time and have sufficient storage. If one of these conditions is not met, an update may not install.

Conduct an audit to identify all internet-connected equipment and make sure the software for each stays updated. Your list may include:

• Servers
• Desktop and laptop computers
• Mobile devices, including phones and tablets
• Network equipment, including routers, firewalls and switches
• Security systems
• Printers and copiers
• Internet of Things (IoT) and smart office devices
• Point-of sale (POS) devices
• Vehicle systems
• Industrial and manufacturing equipment

Update personal devices used for business

Hackers are increasingly attacking small businesses through personal devices.

“Cybercriminals are no longer focused on big companies. This is because personal laptops, phones and home Wi-Fi networks are easier to attack since they are usually less protected,” reports HP Tech Takes. “Many homes now have multiple devices connected to the same Wi-Fi network. If one device is not secured, it can put the rest of your devices at risk.”

Keep the operating systems, software and apps on personal devices used for business up to date. Remind employees to do the same.

When equipment can no longer be updated

Equipment that no longer receives software or firmware updates can pose security risks. Outdated firmware may have contributed to the costly attack on some French supermarkets’ refrigeration systems.

If you must continue using equipment after the manufacturer stops supporting its firmware, the UK National Cyber Security Centre recommends two ways to mitigate risk:

• Reduce thelikelihood of compromise by preventing obsolete devices from accessing untrusted content, making it harder for malicious content to reach and exploit them.
• Reduce theimpact of compromise by restricting vulnerable devices’ access to sensitive data or services. This can limit the damage if a device is compromised.

Cybersecurity at Consumers

At Consumers, our Security and Fraud team is always on alert. We work diligently to help keep Online Banking secure on computers and mobile devices.

If you’re downloading our Mobile App for the first time, get it only from Apple’s App Store or Google Play.

 

Federally insured by NCUA