National CERT warns of supply chain cyber threats to power, banking, defence systems

ISLAMABAD: The National CERT on Tuesday issued a stark cybersecurity advisory, warning that hostile actors could exploit supply chains to infiltrate Pakistan’s critical infrastructure, including power, banking, and defence sectors.

The alert cautioned that even minor lapses in the delivery of hardware or software could trigger widespread system failures, underscoring growing global concerns over vulnerabilities in supply chains increasingly targeted by state-sponsored cyber espionage.

According to the advisory, all incoming hardware should be treated as a potential security risk and subjected to rigorous inspection. It also warned that unverified software updates could introduce concealed backdoors, posing long-term threats to national digital infrastructure.

The CERT flagged vendors with unclear ownership structures as a major risk, urging institutions to ensure transparency and conduct strict due diligence during procurement. It further highlighted the dangers of relying on a single supplier, noting that a breach in one entity could disrupt entire sectors such as the national grid or banking networks.

Institutions have been directed to implement tamper-proof transport mechanisms and tracking systems for sensitive equipment, while also reporting suspicious network activity and unusual software behaviour without delay.

The advisory stressed adopting a zero-trust security model, ensuring all devices are verified before connecting to networks, and warned that negligence in supply chain security could lead to complete paralysis of critical national systems.

The warning comes amid a recent wave of cyberattacks targeting Pakistani media outlets and digital platforms, including disruptions linked to the country’s state-owned satellite, Pak-Sat.

Earlier, the National Assembly of Pakistan was informed about the need for a national firewall to strengthen cyber defences. Minister for IT and Telecom Shaza Fatima Khawaja also emphasised ongoing efforts to safeguard citizens’ digital space as Pakistan’s technological footprint continues to expand.