Loading story…
Security leaders warned that extending IT-centric cybersecurity frameworks into operational technology (OT) and laboratory environments without adaptation can create hidden risk, because core IT assumptions (disposability, reversibility, and recoverability) often do not hold. Rich Kellen (CISO, IFF) emphasized that in labs “the system is the experiment,” where restoring from backups may not restore scientific validity; factors like calibration drift, temperature curves, and timing windows can invalidate results even if systems are brought back online, making “available but wrong” potentially more damaging than downtime.
In healthcare environments, Mohamed Waqas (CTO, Armis) described similar risk drivers arising from unclear ownership and accountability across IT, facilities/OT teams, and healthcare technology management for network-connected medical and facilities devices. He noted that devices are frequently deployed outside cybersecurity visibility, with an expectation that IT/security or vendors will respond only after incidents, while security teams may identify vulnerabilities without being positioned to remediate them—leaving asset owners responsible for fixes they may not be equipped to execute. Both accounts frame the issue as a safety and integrity problem (patient care and scientific outcomes), not just a compliance or “cyber exercise,” and stress governance and cross-functional collaboration to reduce operational risk.
See the actors and campaigns active against you right now.
2 events from the most recent confirmed update back to the earliest known activity.
In a published interview, Armis CTO Mohamed Waqas said unclear ownership of medical device and OT security in healthcare organizations can leave vulnerabilities unremediated and create patient safety risks. He called for stronger governance, collaboration between cybersecurity and health technology teams, and framing cyber issues in terms of patient care, safety, and privacy to gain executive action.
In a published interview, IFF VP and CISO Rich Kellen said treating laboratory and OT environments like data centers creates hidden risk, including scientific integrity, safety, and regulatory consequences that traditional IT recovery models do not address. He described the need for OT-appropriate visibility, carefully managed compensating controls, and collaboration with scientists as stakeholders.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See the adversaries and campaigns active against your sector right now, ranked by what they're exploiting.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Enterprises are increasingly exposed to cybersecurity risks due to the proliferation of unmanaged and diverse extended Internet of Things (xIoT) and operational technology (OT) devices within their networks. Research analyzing over 10 million devices across 700 organizations found that two-thirds of networked devices are not traditional IT assets, but rather include network gear, OT, IoT, and medical equipment. Common high-risk device types such as VoIP phones, IP cameras, point-of-sale systems, and uninterruptible power supplies are often widespread yet remain unmanaged, creating significant security blind spots. The diversity of device functions, vendors, and operating system versions further complicates risk management, making it challenging for security teams to identify, patch, and mitigate vulnerabilities effectively. Manufacturers, in particular, face heightened OT security challenges due to legacy technology, lack of asset visibility, and the growing number of access points resulting from mergers and acquisitions. The complexity of managing access permissions, especially with multiple users sharing admin accounts, increases the difficulty of incident response and overall security posture. Despite increased awareness of these risks, the combination of device diversity, legacy systems, and human factors continues to present substantial obstacles to securing enterprise and manufacturing environments against cyber threats.
Jun 29, 2026
Organizations are increasingly challenged by the risks posed by legacy systems, unmanageable devices, and unknown assets within their networks. Security leaders and experts emphasize the importance of comprehensive asset discovery and visibility as foundational steps to effective vulnerability management. Automated solutions that map infrastructure, including unauthenticated and legacy devices, are critical for identifying blind spots and prioritizing risk. Experts caution against over-reliance on traditional CVE-based tools, highlighting that many real-world breaches exploit default credentials, poor configurations, and unmanaged assets that may not appear in standard vulnerability reports. Rapid response capabilities, such as real-time intelligence and query-based searches, are recommended to quickly identify and mitigate zero-day exposures. In sectors like healthcare, the long lifecycle of medical devices presents unique challenges, as many systems cannot be patched or easily replaced. Security leaders advocate for network segmentation and close collaboration with vendors to manage these risks, while also promoting proactive, risk-based approaches that go beyond compliance checklists. Commentary from industry professionals underscores that legacy and unmanageable systems are often targeted by advanced persistent threats and botnets, with attackers leveraging automation and AI to exploit exposures. Addressing these challenges requires breaking down silos between IT, OT, and security teams, and adopting strategies that prioritize visibility, risk reduction, and continuous improvement across all assets.
Jun 29, 2026
Industrial and manufacturing organizations continue to face significant **operational technology (OT)** security risk as connected control systems, IoT devices, and legacy infrastructure expand the attack surface. A Siemens Energy report cited by *TechRepublic*, based on Ponemon Institute survey data, found that **77%** of respondents said an OT security compromise in the past 12 months led to loss of confidential information or operational disruption, while **52%** said a successful exploit against their industrial control systems is likely within the next year. Respondents also estimated that **41%** of OT attacks go undetected, with many organizations taking more than a month to detect incidents and an average of seven months to recover. The broader picture is that smart factories are still struggling with basic cyber resilience as modernization outpaces security controls. In an interview with *Help Net Security*, Packsize CSO Troy Rydman said unmanaged **IoT** devices, outdated legacy systems, and human-targeted attacks such as phishing and social engineering remain major weaknesses in factory environments. He also highlighted the persistent tradeoff between production uptime and security requirements, underscoring that industrial operators are still balancing business continuity with the need to reduce exposure across connected devices and older operational systems.
Jun 29, 2026