Access to critical infrastructure via weak passwords

A cybersecurity researcher reported that he was able to access 430 critical infrastructure systems in Turkey using commonly used passwords such as '1071' and '1453'. These systems include infrastructure that directly affects daily life, such as water pumps and wastewater facilities.

Why it matters

Critical infrastructure is vital for the continuity of services like water, energy and waste management. The use of easily guessable passwords in such systems paves the way for unauthorized access and potential interference.

Password security

Experts recommend using long, unique and regularly changed passwords instead of default and predictable ones. They also advise against exposing these systems directly to the internet and recommend supporting them with additional protections such as two-factor authentication.