Elevated ransomware assaults on industrial management techniques (ICS), combined with normal ICS insecurity discovered throughout the manufacturing sector, has given rise to a information particularly addressing this threat.
Manufacturing has been a goal of ransomware for fairly a while — I’ve even coated a latest assault targeted on credential harvesting.
With the objective of a ransomware assault to disrupt operations, bringing operational applied sciences to a halt is an impactful solution to make the assertion “pay the ransom.”
In line with cybersecurity vendor Dragos’s recently-released 2023 OT Cybersecurity in Overview report, manufacturing has been a significant goal:
- Ransomware assaults in opposition to industrial organizations elevated 50% over the earlier yr
- 70% of all ransomware assaults focused 638 manufacturing entities in 33 distinctive manufacturing subsectors.
In different phrases, it’s an enormous drawback.
In response, SANS has launched the SANS Technique Information: ICS Is the Enterprise as a way of offering steerage on methods to higher safe ICS/OT environments. The controls they suggest are:
- ICS-Particular Incident Response
- Defensible Management System Community Structure
- ICS Community Visibility and Monitoring
- ICS Safe Distant Entry
- Danger-Primarily based ICS
- Vulnerability Administration
What’s a bit of unnerving is that SANS (who quotes the Dragos report a number of instances) fully missed the boat on the place manufacturing’s best threat is; in response to the Dragos report, the primary TTP utilized by risk teams is Legitimate Accounts (present in 60% of all assaults on manufacturing).
And nowhere within the SANS suggestions is something about securing credentials with MFA, encouraging complicated (learn: not simply guessed) passwords, and safety consciousness coaching (as the first methods accounts are compromised is thru phishing and social engineering).
Manufacturing positively has some securing to do; the important thing can be addressing its the best dangers.
KnowBe4 empowers your workforce to make smarter safety selections on daily basis. Over 70,000 organizations worldwide belief the KnowBe4 platform to strengthen their safety tradition and cut back human threat.