Industrial cybersecurity risks rise due to IT/OT convergence

Industrial cybersecurity risks are escalating due to the convergence of Information Technology (IT) and Operational Technology (OT). An international study by Rockwell Automation and Sapio Research, involving 1,560 participants across 17 manufacturing nations, reveals that over one-third of industrial companies view cyber risks as a major external barrier to growth.

The study highlights a significant gap between perceived security and reality, noting that 46% of surveyed companies experienced a cyber incident in the past year. The increasing connectivity of production facilities, combined with the deployment of Artificial Intelligence, has expanded the attack surface.

Security experts report a shift from general IT ransomware to direct attacks on Industrial Control Systems (ICS) and OT networks. Rather than causing collateral damage, attackers are increasingly targeting unsecure industrial protocols and virtualization layers. For example, malware such as ‘FrostyGoop’ exploits the lack of authentication in standard protocols like Modbus TCP to manipulate physical processes. Additionally, attacks on OT support servers and hypervisors can lead to a ‘loss of view’ and ‘loss of control,’ often forcing the emergency shutdown of entire production lines.