OT/ICS Attack Surface Expansion: Internet-Exposed Industrial Control Systems and Exploitation Trends

What Did This Cybersecurity Research Find?

This cybersecurity industrial control study scanned for internet-exposed OT/ICS devices across 40 countries and correlated exposure with reported incidents. Cybersecurity risks to operational technology environments grew as the number of internet-accessible ICS devices increased 38% from 2021 to 2024, with exposed HMIs and PLCs representing the largest attack surface expansion.

Key Findings

• 1Internet-exposed ICS devices grew 38% from 2021 to 2024
• 2Exposed HMIs and PLCs accounted for 61% of discoverable OT devices
• 3Default credentials were still present on 29% of exposed OT devices
• 4Incidents targeting OT environments increased 87% in the study period
• 5Organizations with IT/OT security convergence programs detected OT threats 54% faster

How Does This Apply to Cybersecurity Careers?

OT/ICS security is a growing career specialization with strong demand. Security professionals moving into industrial sectors need to understand the unique threat landscape for operational technology.

Who Should Read This?

Frequently Asked Questions