{"id":6112,"date":"2024-11-06T15:26:00","date_gmt":"2024-11-06T21:26:00","guid":{"rendered":"https:\/\/www.darkreading.com\/ics-ot-security\/attackers-breach-network-provider-ot-ics-network"},"modified":"2024-11-06T15:26:00","modified_gmt":"2024-11-06T21:26:00","slug":"attackers-breach-it-based-networks-before-jumping-to-ics-ot-systems","status":"publish","type":"post","link":"https:\/\/ddi.mohflo.net\/index.php\/2024\/11\/06\/attackers-breach-it-based-networks-before-jumping-to-ics-ot-systems\/","title":{"rendered":"Attackers Breach IT-Based Networks Before Jumping to ICS\/OT Systems"},"content":{"rendered":"
<\/a><\/div>\n
<\/div>\n

Attacks against industrial control systems and operations technology systems are increasing, as adversaries find weaknesses in IT networks that allows them to move into OT networks, according to a recent report from SANS.<\/span><\/p>\n

The <\/span>State of ICS\/OT Cybersecurity 2024<\/a><\/span> report from SANS is based on responses from cybersecurity professionals in various critical infrastructure sectors. There were more non-ransomware incidents (74.4%) reported than ransomware (11.7%) over the past year, according to the SANS report.<\/span><\/p>\n

Other initial attack vectors involved in OT\/ICS incidents include compromising OT and industrial control systems by used of external remote services (23.7%) or internet-accessible devices (23.7%); compromising employee workstations (20.3%) and removable media (20.3%); and a supply chain compromise (20.3%). It’s worth noting that 18.6% respondents said attackers attempted spear phishing with an email attachment for the initial compromise.<\/span><\/p>\n

One out of five, of 19%, of respondents reported one or more security incidents over the past year.<\/span><\/p>\n

While only 12% of respondents reported being the targets of ransomware attacks in the past 12 months, the impact on the ICS\/OT environment remains “potentially catastrophic,” SANS said in the report. Of the organizations who reported a ransomware incident, 38% said only IT network systems were impacted and 28.6% said OT and ICS networks were affected. Just 21% said both networks were impacted. More than a third, or 38.1%, said reliabiiy and safety was compromised during those attacks.<\/span><\/p>\n

“Although the overall trend [ransomware] seems to have decreased, the impacts are still potentially catastrophic, and should be considered for all ICS\/OT- specific incident response programs,” SANS said.<\/span><\/p>\n

Source<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"

Attacks against industrial control systems and operations technology systems are<\/p>\n","protected":false},"author":12,"featured_media":6113,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":""},"categories":[1],"tags":[809],"class_list":["post-6112","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","tag-dark-reading"],"featured_image_urls":{"full":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/11\/attackers-breach-it-based-networks-before-jumping-to-ics-ot-systems.jpg?fit=1416%2C797&ssl=1",1416,797,false],"thumbnail":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/11\/attackers-breach-it-based-networks-before-jumping-to-ics-ot-systems.jpg?resize=150%2C150&ssl=1",150,150,true],"medium":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/11\/attackers-breach-it-based-networks-before-jumping-to-ics-ot-systems.jpg?fit=300%2C169&ssl=1",300,169,true],"medium_large":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/11\/attackers-breach-it-based-networks-before-jumping-to-ics-ot-systems.jpg?fit=640%2C360&ssl=1",640,360,true],"large":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/11\/attackers-breach-it-based-networks-before-jumping-to-ics-ot-systems.jpg?fit=640%2C360&ssl=1",640,360,true],"1536x1536":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/11\/attackers-breach-it-based-networks-before-jumping-to-ics-ot-systems.jpg?fit=1416%2C797&ssl=1",1416,797,true],"2048x2048":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/11\/attackers-breach-it-based-networks-before-jumping-to-ics-ot-systems.jpg?fit=1416%2C797&ssl=1",1416,797,true],"chromenews-featured":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/11\/attackers-breach-it-based-networks-before-jumping-to-ics-ot-systems.jpg?fit=1024%2C576&ssl=1",1024,576,true],"chromenews-large":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/11\/attackers-breach-it-based-networks-before-jumping-to-ics-ot-systems.jpg?resize=825%2C575&ssl=1",825,575,true],"chromenews-medium":["https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/11\/attackers-breach-it-based-networks-before-jumping-to-ics-ot-systems.jpg?resize=590%2C410&ssl=1",590,410,true]},"author_info":{"display_name":"Dark Reading","author_link":"https:\/\/ddi.mohflo.net\/index.php\/author\/darkreading\/"},"category_info":"Uncategorized<\/a>","tag_info":"Uncategorized","comment_count":"0","jetpack_featured_media_url":"https:\/\/i0.wp.com\/ddi.mohflo.net\/wp-content\/uploads\/2024\/11\/attackers-breach-it-based-networks-before-jumping-to-ics-ot-systems.jpg?fit=1416%2C797&ssl=1","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/6112","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/users\/12"}],"replies":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/comments?post=6112"}],"version-history":[{"count":1,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/6112\/revisions"}],"predecessor-version":[{"id":6123,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/posts\/6112\/revisions\/6123"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media\/6113"}],"wp:attachment":[{"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/media?parent=6112"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/categories?post=6112"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ddi.mohflo.net\/index.php\/wp-json\/wp\/v2\/tags?post=6112"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}