Cybersecurity experts at Kaspersky have identified security vulnerabilities in widely used wireless barcode scanners that could allow cybercriminals to gain access to warehouse operational technology (OT) networks, potentially disrupting supply chains and business operations.
The cybersecurity company revealed its findings during the Security Analyst Summit 2026 in Bali following a security audit of a modern warehouse digital ecosystem.
According to Kaspersky, warehouses have become increasingly dependent on digital technologies to manage inventory, logistics and distribution. With global e-commerce sales now exceeding $6 trillion, the company warned that cyberattacks on warehouse infrastructure could lead to costly operational disruptions, financial losses and reputational damage.
Researchers discovered that a commonly used barcode scanner model contains a weakness in the way it communicates with its base station. The scanners do not authenticate connections with the base station, creating an opportunity for attackers within Bluetooth range to exploit the wireless connection.
Kaspersky said an attacker could intercept the Bluetooth address of a base station and send malicious keyboard commands that are treated as legitimate user input by a connected computer. This could allow unauthorised commands to be executed without the knowledge of warehouse staff.
The company warned that once attackers gain access to a workstation inside a warehouse network, they may be able to move deeper into critical operational systems, including Warehouse Management Systems (WMS). Similar attack methods could also affect other warehouse devices such as portable data terminals and thermal printers.
“Modern retail and logistics are profoundly digital, from enterprise-wide management platforms down to every device in a worker’s hands. This pervasive connectivity means that any technology at any tier can become an entry point for a cyberattack capable of destabilising the entire ecosystem – as our research shows, even a single barcode scanner,” said Sergey Sidorov, Head of Industrial Security Services at Kaspersky.
To reduce cybersecurity risks, Kaspersky recommends that businesses verify all new devices before connecting them to warehouse networks, disable unused Bluetooth interfaces, implement strong authentication measures, segment networks to limit unnecessary connections, apply software updates promptly and restrict user permissions to only those required for their roles.
The company also advises organisations to conduct regular cybersecurity assessments and simulated attack exercises to identify weaknesses before they can be exploited.
Kaspersky said strengthening cybersecurity across all connected devices has become essential for warehouses, retailers and logistics companies as digital technologies continue to transform supply chain operations.
