CISA warns against threat actors exploiting OT/ICS with unsophisticated means

The Cybersecurity & Infrastructure Security Agency (CISA) issued an alert warning users of industrial control systems and operations technology to be wary of hackers using "unsophisticated" methods to breach networks.

According to the CISA alert, active exploitation of Internet-accessible operations technology and industrial control systems that are exposed and vulnerable may allow cyber threat actors to use default credentials, conduct brute force attacks or use other unsophisticated methods to access these devices.

CISA urges OT/ICS operators to apply the recommendations listed in its "Defending OT Operations Against Ongoing Pro-Russia Hacktivist Activity" to defend against this activity.