Honeywell recently released a new study showing that ransomware threats against industrial operators and manufacturers have grown significantly. Specifically, the study found that ransomware attacks increased by 46% in the first quarter of 2025. While this increase has impacted a range of industrial sectors, Honeywell concluded that agriculture and food production has been the most affected. However, we know that other OT networks such as drinking water infrastructure have become vulnerable to attacks.
As the threat of attacks continues to grow, preparedness has yet to catch up. Data from TXOne’s 2024 Annual OT/ICS Cybersecurity Report “found that 85% of organizations don’t conduct regular patching. A majority install patches quarterly or less often, which leaves them exposed to attacks for extended periods of time,” according to Security Week. Considering this apparent need for operators to better equip themselves with cybersecurity protections, there have been a number of efforts launched. For instance, the National Security Agency (NSA) and Cybersecurity and Infrastructure Security Agency (CISA) released a guide in January designed to help OT operators prioritize security when selecting OT products.
NSA Smart OT Controller Security
In addition to the guide published alongside the CISA, the NSA put out a study in April that furthered their focus on the evolving OT landscape. As the agency explained, the convergence of IT and OT has put OT at increased risk, which is especially worrisome for National Security Systems (NSS). They pose that there must be rigorous “robust security policies and technical security requirements” in place. To identify how best to approach these requirements, their study focused specifically on smart controllers, which as they explain “are intelligent OT embedded devices with enhanced capabilities, such as advanced processing power, integrated communication features, and edge computing abilities that are normally associated with network devices.”
Read this article in full here.