A wake-up call for broadcasters: The Federal Communications Commission (FCC) has issued a critical warning in response to recent hacking incidents that have shaken the industry. But here's where it gets controversial... the FCC is specifically targeting stations using Barix equipment, urging them to bolster their cybersecurity measures.
Recent hacks at Gow Media's "ESPN 97.5 Houston" and Virginia Tech Foundation's "Radio IQ" highlight a disturbing trend. Threat actors exploited improperly secured Barix equipment, compromising the studio-transmitter link and allowing them to insert their own audio content. The result? Both stations inadvertently broadcasted obscene language and inappropriate material, including an Emergency Alert System signal, to their listeners.
For example, during the Dallas Cowboys-Philadelphia Eagles game on November 23, KFNC's broadcast was briefly hijacked, with audio identifying "grimplaysstuff" taking over the airwaves. The station later confirmed on Facebook that their signal had been hacked. Similarly, WVTF's backup audio signal was compromised on November 19, airing unauthorized content over their FM signal in Richmond, VA.
"We had some dead-air that triggered the switch to back-up audio where an unauthorized audio loop was placed by the hacker," the station explained. Luckily, their main audio feed remained secure.
The FCC's notice outlines a series of recommendations to prevent such incidents. Stations are urged to install security patches and upgrade firmware and software regularly. Default passwords should be changed to robust alternatives and updated frequently. Additionally, the FCC suggests placing EAS, Barix, and other equipment behind network firewalls and utilizing VPNs to restrict remote management access.
The Commission also encourages broadcasters to reach out to EAS equipment manufacturers for security guidance and to report any suspected unlawful access or cyberattacks to the Federal Bureau of Investigation's Internet Crime Complaint Center.
This is a critical issue for the broadcasting industry, and the FCC's warning serves as a stark reminder of the potential consequences of inadequate cybersecurity measures. As we navigate an increasingly digital world, the need for robust security practices is more important than ever.
And this is the part most people miss... the FCC's recommendations are not just for Barix users. All broadcasters should take note and ensure they are doing everything possible to protect their networks and systems.
What do you think? Are these measures enough to deter future attacks? Or should the industry be doing more to safeguard against cyber threats? We'd love to hear your thoughts in the comments!