Threat Actors Continue to Exploit OT/ICS through Unsophisticated Means

[David H. Lipman]

Threat Actors Continue to Exploit internet-accessible operational technology (OT) and industrial control systems (ICS) through Unsophisticated Means

Release Date: September 25, 2024

Quote

CISA continues to respond to active exploitation of internet-accessible operational technology (OT) and industrial control systems (ICS) devices, including those in the Water and Wastewater Systems (WWS) Sector. Exposed and vulnerable OT/ICS systems may allow cyber threat actors to use default credentials, conduct brute force attacks, or use other unsophisticated methods to access these devices and cause harm.   

CISA urges OT/ICS operators in critical infrastructure sectors to apply the recommendations listed in Defending OT Operations Against Ongoing Pro-Russia Hacktivist Activity to defend against this activity. To learn more about secure by design principles and practices, visit CISA's Secure by Design webpage. For more information and guidance on protection against the most common and impactful threats, tactics, techniques, and procedures, visit CISA’s Cross-Sector Cybersecurity Performance Goals.

 

This product is provided subject to this Notification and this Privacy & Use policy.