IoT/OT Network Adversaries Advance Amidst Bug Barrage – Dark Reading

Cyberattacks on critical infrastructure targeting IoT and OS networks are increasing in sophistication, while ICS vulnerabilities surge, new data shows.
February 8, 2024
New telemetry data from Internet of Things and operational technology networks brings into sharp focus the risks associated with IoT and OT installations: These networks are subject to highly sophisticated attacks, while in tandem, the volume of vulnerabilities associated with each explodes. And consequently, IoT and OT networks pose even greater risks than generally acknowledged.
Data from the last half of 2023 analyzed by Nozomi Networks showed the largest portion of threats to IoT and OT networks were network anomalies and attacks, with sophisticated tactics like TCP flood and network scans being most popular, the company said in a new report.
"These trends should serve as a warning that attackers are adopting more sophisticated methods to directly target critical infrastructure, and could be indicative of rising global hostilities," Chris Grove, director of cybersecurity strategy at Nozomi Networks, said in a statement about the new data. "The significant uptick in anomalies could mean that the threat actors are getting past the first line of defense while penetrating deeper than many would have initially believed, which would require a high level of sophistication."
Meanwhile, tried-and-true IoT and OT cyberattack approaches like access control and authorization threats, including brute force and multiple login attacks, were up too — by 123%.
A bit of good news: There was a 12% dip in daily cyberattacks against IoT devices during the last half of 2023.
Piling additional cyber-risk onto IoT and OT network defenders was the mounting number of vulnerabilities affecting industrial control systems (ICS) identified by the Cybersecurity and Infrastructure Security Agency, which rose 38% over the previous six months, the Nozomi Networks analysis added. Manufacturing vulnerabilities dominated the CISA list, with a 230% increase in discoveries over the previous half-year.
Similarly, the number of vendors impacted by CISA-reported ICS bugs was up by 19%.
Grove tells Dark Reading that it's unrealistic to think any network can be 100% secure.
"That's why it's important to focus not only on security defenses but also adopt a post-breach mentality," Grove adds. "To minimize risk and maximize operational resiliency, prioritize strategies that include network segmentation, asset discovery, vulnerability management, patching, logging, endpoint detection, and threat intelligence."
Actionable asset and threat intelligence should also be part of the cyber defense mix, Grove says.
"In an increasingly complex threat landscape, resiliency will be the key to effective defenses," he adds.
Becky Bracken, Editor, Dark Reading

You May Also Like
DevSecOps: The Smart Way to Shift Left
Making Sense of Security Operations Data
Unbiased Testing. Unbeatable Results
Your Everywhere Security Guide: 4 Steps to Stop Cyberattacks
API Security: Protecting Your Application’s Attack Surface
Cybersecurity’s Hottest New Technologies – Dark Reading March 21 Event
Black Hat Asia – April 16-19 – Learn More
Black Hat Spring Trainings – March 12-15 – Learn More
Industrial Networks in the Age of Digitalization
How Enterprises Assess Their Cyber-Risk
Passwords Are Passe: Next Gen Authentication Addresses Today’s Threats
The State of Supply Chain Threats
How to Deploy Zero Trust for Remote Workforce Security
Understanding Today’s Threat Actors
Fortinet Named a Leader in the Forrester Wave: Zero Trust Edge (ZTE) Solutions
Zero Trust Access For Dummies, 2nd Fortinet Special Edition
Threat Intelligence: Data, People and Processes
Mandiant Threat Intelligence at Penn State Health
Cybersecurity’s Hottest New Technologies – Dark Reading March 21 Event
Black Hat Asia – April 16-19 – Learn More
Black Hat Spring Trainings – March 12-15 – Learn More
Copyright © 2024 Informa PLC Informa UK Limited is a company registered in England and Wales with company number 1072954 whose registered office is 5 Howick Place, London, SW1P 1WG.

source

About The Author

admin

See author's posts