{"id":17239953,"date":"2026-11-02T12:42:38","date_gmt":"2026-11-02T18:42:38","guid":{"rendered":"https:\/\/irpros.com\/?p=17239953"},"modified":"2026-11-02T12:45:36","modified_gmt":"2026-11-02T18:45:36","slug":"seguridad-de-la-tecnologia-operativa","status":"publish","type":"post","link":"https:\/\/irpros.com\/es\/operational-technology-security\/","title":{"rendered":"Seguridad de la tecnolog\u00eda operativa en 2026"},"content":{"rendered":"\n\t\t
<\/div><\/div><\/div>
\n\t
\n\t\t
\n\t\t\t
\n\t\t\t\t\n
\n\t

Operational Technology Security<\/h2>\n

Recent cyberattacks on refrigeration systems at grocery operations in several European countries show how remote access to controllers can be abused. Public reporting describes attackers changing temperature and defrost settings remotely, which caused food losses and, in some locations, fires. Investigations are ongoing. The controllers involved are the same kind of equipment we install, service, and monitor, so we want to share what matters most now. We have no confirmed reports of a similar incident involving [IR Pros customers \/ your facility], but we want you to be prepared.<\/p>\n

No control system should be reachable from the internet.<\/strong><\/p>\n

Refrigeration controllers, their web interfaces, and their management ports should not be directly accessible from the public internet. Access should go through a virtual private network (VPN) or a managed gateway that requires authentication and is limited to the specific people and addresses that need it. If you are not sure whether your controllers are exposed, we can help you check.<\/p>\n

Review remote management tools.<\/strong><\/p>\n

If anyone uses TeamViewer, SplashTop, AnyDesk, or a similar tool to reach controllers or the computers that run them:<\/p>\n

    \n
  1. Change every password used with those tools, using a unique password for each account.<\/li>\n
  2. Update the software to the current version.<\/li>\n
  3. Remove any accounts that are no longer needed.<\/li>\n<\/ol>\n

    Rotate passwords when people leave.<\/strong><\/p>\n

    When someone with knowledge of your systems leaves your company or a service vendor, change the passwords they knew. A former employee or contractor who still has working credentials can access systems long after their employment ends. This covers controller logins, remote access accounts, shared service accounts, and network equipment. Make password changes part of your offboarding checklist.<\/p>\n

    Use a password manager.<\/strong><\/p>\n

    Shared and service passwords should be stored in a password manager, not in spreadsheets, emails, or notes. A tool such as Bitwarden lets your team keep a unique password for every system, share access to specific entries without revealing the password, and revoke access when someone leaves. Choose one with organization-level administration so offboarding takes one action.<\/p>\n

    Use passkeys where your systems support them.<\/strong><\/p>\n

    Passkeys are a stronger form of sign-in than passwords. They are tied to a specific site or service and cannot be typed into a fake login page. They also resist adversary-in-the-middle attacks, in which an attacker relays a login to the real site in real time to capture passwords and one-time codes. Where a remote access tool or controller interface supports passkeys or hardware security keys, turn them on. Where it does not, use a unique password from a password manager together with multi-factor authentication, preferring app-based or hardware codes over text messages.<\/p>\n

    Insiders and access brokers.<\/strong><\/p>\n

    Access to computer systems is bought and sold. In the technology industry, people have been recruited for payment to provide credentials or access, and stolen logins are routinely resold to criminal buyers. Attackers who obtain a valid login face far fewer obstacles than those who have to break in, which is why protecting credentials matters as much as protecting equipment. Treat any unsolicited offer for access, login details, or system information as a security incident and report it to [contact] right away. If someone asks for a password, a remote session, or configuration details, confirm the request through a known contact before responding, even if it appears to come from inside your organization.<\/p>\n

    Plan controller updates around operations.<\/strong><\/p>\n

    Many controllers in service run firmware that is several years old. Manufacturers have found security weaknesses in controller software and released fixes in later versions, and older versions may stop receiving them. Where a controller supports current firmware, we recommend scheduling updates with us, timed around your food safety and operating requirements so they do not interrupt service. Where a controller can no longer be updated, we can discuss isolation, tighter access rules, and a replacement plan.<\/p>\n

    Operating system end of life.<\/strong><\/p>\n

    Windows 10 reached end of support in October 2025, and Windows Server 2016 reaches end of extended support in January 2027. Systems running these versions no longer receive routine security updates unless enrolled in a paid extended security program. If any computers or servers connected to your refrigeration network run these versions, we recommend upgrading or replacing them, and we can help plan the work around your operations.<\/p>\n<\/div>\n\n\n\n\n\t\t\t<\/div> \n\t\t<\/div>\n\t<\/div> \n<\/div><\/div>\n","protected":false},"excerpt":{"rendered":"Operational Technology Security Recent cyberattacks on refrigeration systems at grocery operations in several European countries show...","protected":false},"author":1,"featured_media":17239956,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[78,45,86,12,1],"tags":[],"class_list":["post-17239953","post","type-post","status-publish","format-standard","has-post-thumbnail","category-chiller_refrigeration","category-cold-storage","category-legal","category-thought-leadership","category-uncategorized"],"acf":[],"_links":{"self":[{"href":"https:\/\/irpros.com\/es\/wp-json\/wp\/v2\/posts\/17239953","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/irpros.com\/es\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/irpros.com\/es\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/irpros.com\/es\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/irpros.com\/es\/wp-json\/wp\/v2\/comments?post=17239953"}],"version-history":[{"count":1,"href":"https:\/\/irpros.com\/es\/wp-json\/wp\/v2\/posts\/17239953\/revisions"}],"predecessor-version":[{"id":17239955,"href":"https:\/\/irpros.com\/es\/wp-json\/wp\/v2\/posts\/17239953\/revisions\/17239955"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/irpros.com\/es\/wp-json\/wp\/v2\/media\/17239956"}],"wp:attachment":[{"href":"https:\/\/irpros.com\/es\/wp-json\/wp\/v2\/media?parent=17239953"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/irpros.com\/es\/wp-json\/wp\/v2\/categories?post=17239953"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/irpros.com\/es\/wp-json\/wp\/v2\/tags?post=17239953"}],"curies":[{"name":"Gracias","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}