Challenging Assumptions: Enhancing the Understanding of Securing Internet-Exposed Industrial Control Systems | Grey Noise Blog
Summary: Censys identified over 40,000 internet-connected ICS devices in the U.S., including more than 400 human-machine interfaces, many of which required no authentication when observed. GreyNoise then set up hyper-realistic HMI emulations camouflaged by geography and ASNs and analyzed forty-five days of data, finding that common remote access services were targeted swiftly rather than specialized ICS protocols.
Why it matters: More than 400 unauthenticated HMIs are reachable from the internet, and attackers went after the generic remote access entry points first, which may make exploitation of specialized ICS protocols unnecessary.
Read the original at GreyNoise Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026