Critical infrastructure operators add more insecure industrial equipment online.

The article focuses on the increasing vulnerability of industrial control systems (ICS) that are publicly accessible online, with nearly 200,000 such systems identified by the security firm Bitsight. The number of exposed ICS devices rose by 13% from early to late 2024, with predictions that it will exceed 200,000 by the end of 2025. Bitsight highlights that many of these devices are newly activated and exhibit significant security weaknesses, including outdated protocols and minimal authentication, posing risks across various sectors such as energy, water, telecommunications, healthcare, and manufacturing. The report emphasizes that both legacy and new equipment are susceptible to serious vulnerabilities, which could lead to critical infrastructure failures. [Extracted from the article]