Challenges and Concerns Surrounding Cybersecurity for the 2024 Paris Olympics

The 2024 Summer Olympics in Paris are gearing up to be one of the most secure events in terms of cybersecurity, with experts noting significant improvements compared to previous major sporting events. Despite this progress, there are still some troubling gaps that could potentially be exploited by cyber attackers.

Researchers at Outpost24 recently conducted a comprehensive assessment of the Internet-facing infrastructure associated with the Paris 2024 Olympics. While they found that the external attack surface is more secure than in previous events, they identified a few vulnerabilities that could be problematic. These include open ports, SSL misconfigurations, security header issues, domain squatting, and privacy violations.

Stijn Vande Casteele, CSO of Outpost24, emphasized the importance of maintaining basic IT and cyber hygiene to deter attackers. The sheer size and complexity of the Olympics’ digital footprint, with over 700 domains and 800 external web applications across multiple cloud providers, present a significant challenge for security stakeholders.

Cybersecurity is a top concern for Olympics officials in France, with preparations starting well in advance to prevent potential attacks. ANSSI, France’s primary cybersecurity agency, has been conducting penetration tests and awareness campaigns to mitigate risks. The goal is to block the majority of attacks and avoid incidents like the disruption caused by the “Olympic Destroyer” malware during the 2018 Winter Olympics.

As the Games approach, experts anticipate diverse, sophisticated, and persistent cyber threats targeting the event. Geopolitical tensions and global conflicts could further complicate the security landscape, with state-sponsored actors posing a significant risk. Phishing campaigns, DDoS attacks, and espionage are common tactics used during high-profile events like the Olympics.

Securing the ever-evolving digital footprint of the Olympics is akin to safeguarding a constantly changing house, according to Vande Casteele. With new vulnerabilities emerging daily, maintaining oversight and vigilance is crucial to ensure a safe and successful event.