As cited
Copy frozen at (site build).
ot ics
Challenging Assumptions: Enhancing the Understanding of Securing Internet-Exposed Industrial Control Systems
Censys and GreyNoise released research at LABSCon 2024 examining real-world threats to internet-exposed Industrial Control Systems (ICS). The findings show that attackers prioritize common Remote Access Service (RAS) protocols over ICS-specific communications when targeting internet-connected human-machine interfaces (HMIs), challenging previous assumptions about how critical infrastructure is compromised.
Why it matters: Industrial control system operators and critical infrastructure defenders need to reconsider their threat model priorities, as the research indicates that generic RAS protocols rather than specialized ICS exploits represent the primary attack vector for internet-connected systems.
- Source published
- First seen by Cybersecurity Tracker