How Secure Is Your Farm Technology?

The increasing reliance on technology in agriculture has exposed the industry to a growing threat of cyber attacks, warns cybersecurity expert Alastair Miller. Government statistics from the Computer Emergency Response Team reveal a significant rise in direct financial losses from cybercrime in the first quarter of this year, reaching $5.8 million, marking a 66% increase from the same period in 2022, where losses stood at $3.7 million. This alarming trend underlines the vulnerability of the agricultural sector to malicious cyber activities.

Miller, a principal advisory consultant with Australasian company Aura Information Security, emphasises that no sector is immune to cyber threats, including agriculture, which has seen an increasing integration of technology into its operations. Modern farming equipment, such as tractors and combine harvesters, now incorporates a surprising amount of computer technology. As a result, the industry is becoming an attractive target for cybercriminals seeking to exploit vulnerabilities in the technological infrastructure.

In particular, cybercriminals are evolving their tactics by targeting businesses through the Internet of Things (IoT), a network of interconnected sensors, software, and operating technology within a company. Miller notes that these attacks are becoming more sophisticated, with criminals exploiting security flaws in IoT systems to gain unauthorised access to networks. Farms, orchards, and vineyards, which increasingly rely on technology to manage various aspects of their operations, are particularly vulnerable to these cyber threats.

Alistair Miller says there are security steps companies and individuals can take to improve their cyber safety.

Sensors used for tasks such as heating, cooling, irrigation, security, and lighting are common in agricultural settings. Once infiltrated, cyber attackers may manipulate sensor settings, causing chaos and potential destruction of crops or products. Miller highlights instances where cybercriminals may hold data or systems hostage, demanding ransom payments from victims. Moreover, the targeting of agricultural businesses through IoT attacks is on the rise, with vineyards, in particular, facing increased threats due to the substantial financial stakes associated with production.

Miller underscores the need for enhanced cybersecurity measures in the agricultural sector. Segregating system networks, ensuring that business IoT is not connected to the same internet network with general access, is crucial. Regularly updating systems to address vulnerabilities is another key step in fortifying cybersecurity defences. Miller advocates for education and awareness campaigns to equip individuals with the knowledge to recognise suspicious emails or texts that may hint at attempted cyber intrusions.

As a cautionary tale, Miller emphasises the importance of scrutinising emails, especially those claiming to be from banks or businesses seeking personal information. Taking the time to verify the authenticity of such communications before clicking on links can prevent falling victim to phishing attacks. In an environment where cybercrime laws may be lacking and offenders often operate from overseas, the responsibility for individual protection falls heavily on businesses and individuals themselves. While obtaining fraud insurance can be challenging and costly, Miller urges individuals to be proactive in safeguarding their systems against the evolving landscape of cyber threats in agriculture.