OT Cybersecurity Best Practices for SMBs: Managing Default Passwords and Identifying ICS/OT Devices Exposed to the Internet
Summary: Dragos OT-CERT published best-practice guidance for small and medium businesses on two longstanding ICS/OT weaknesses: devices exposed to the internet and default passwords. The blog cites the CyberAv3ngers attacks on Unitronics devices as a reminder that these known, decades-old configuration problems persist in under-resourced organizations.
What's compelling: The CyberAv3ngers campaign against Unitronics devices shows that attackers are still winning with default passwords and internet-exposed ICS, not novel exploits - and the guidance notes your risk assessment should also cover an attack on a critical supplier, since you may not be able to produce your product or serve customers if one goes down.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026