Nozomi Networks Labs report: Vulnerability disclosures rising at an alarming rate

Moreno Carullo of Nozomi Networks

A new report from Nozomi Networks Labs finds cyber threats growing at an alarming rate in the first half of 2021. Attacks are driven largely by the emergence of Ransomware as a Service (RaaS) gangs that are cashing in on critical infrastructure organisations.

Analysis of rising ICS vulnerabilities found critical manufacturing was the most susceptible industry, while a deep dive into IoT security cameras highlights how quickly the attack surface is expanding.”Colonial Pipeline, JBS and the latest Kaseya software supply chain attack are painful lessons that the threat of ransomware attacks is real,” says Nozomi Networks co-founder and CTO Moreno Carullo.

“Security professionals must be armed with network security and visibility solutions that incorporate real time threat intelligence and make it possible to quickly respond with actionable recommendations and plans. Understanding how these criminal organisations work and anticipating future attacks is critical as they defend against this unfortunate new normal.”

Nozomi Networks’ latest “OT/IoT Security Report” gives cybersecurity professionals an overview of the OT and IoT threats analysed by the Nozomi Networks Labs security research team. The report found:

  • Analysis of DarkSide, REvil and Ryuk highlight the growing dominance of RaaS models.
  • ICS-CERT vulnerabilities increased 44% in the first half of 2021.
  • Vulnerabilities in the critical manufacturing sector rose 148%.
  • The top 3 industries affected included critical manufacturing, a grouping identified as multiple industries, and the energy sector.
  • Software supply chain-related vulnerabilities continue to surface as do medical device vulnerabilities.
  • With more than a billion CCTV cameras expected to be in production globally this year, insecure IoT security cameras are a growing concern. The report includes an analysis of the Verkada breach and security vulnerabilities in Reolink cameras and ThroughTek software discovered by Nozomi Networks Labs.

“As industrial organisations embrace digital transformation, those with a wait and see mindset are learning the hard way that they weren’t prepared for an attack,” says Nozomi Networks CEO Edgard Capdevielle. “Threats may be on the rise, but technologies and practices to defeat them are available now. We encourage organisations to adopt a post-breach mindset pre-breach and strengthen their security and operational resiliency before it’s too late.”

Nozomi Networks’ “OT/IoT Security Report” provides security professionals with key insights for re-evaluating risk models and security programs, along with actionable recommendations for securing operational systems. The report focuses on ransomware, new vulnerability disclosures and the security risks of IoT security cameras.

Comment on this article below or via Twitter: @IoTNow_OR @jcIoTnow

FEATURED IoT STORIES

9 IoT applications that will change everything

Posted on: September 1, 2021

Whether you are a future-minded CEO, tech-driven CEO or IT leader, you’ve come across the term IoT before. It’s often used alongside superlatives regarding how it will revolutionize the way you work, play, and live. But is it just another buzzword, or is it the as-promised technological holy grail? The truth is that Internet of

Read more

Which IoT Platform 2021? IoT Now Enterprise Buyers’ Guide

Posted on: August 30, 2021

There are several different parts in a complete IoT solution, all of which must work together to get the result needed, write IoT Now Enterprise Buyers’ Guide – Which IoT Platform 2021? authors Robin Duke-Woolley, the CEO and Bill Ingle, a senior analyst, at Beecham Research. Figure 1 shows these parts and, although not all

Read more

CAT-M1 vs NB-IoT – examining the real differences

Posted on: June 21, 2021

As industry players look to provide the next generation of IoT connectivity, two different standards have emerged under release 13 of 3GPP – CAT-M1 and NB-IoT.

Read more

IoT and home automation: What does the future hold?

Posted on: June 10, 2020

Once a dream, iot home automation is slowly but steadily becoming a part of daily lives around the world. In fact, it is believed that the global market for smart home automation will reach $40 billion by 2020.

Read more
RECENT ARTICLES

Snow Software study uncovers the realities vs. the promises of cloud

Posted on: October 26, 2021

26 October, 2021 –Snow Software, the global provider of technology intelligence, unveiled findings from its most recent survey, based on the input from more than 500 IT leaders from organisations with over 500 employees in the United States and United Kingdom to determine the current state of cloud infrastructure.

Read more

CloudM announces Archive feature which save businesses time and money while meeting compliance demands

Posted on: October 26, 2021

CloudM, a SaaS data management platform, has announced the launch of Archive, a new feature which allows users to easily, automatically, and safely store and recover user data, helping businesses to remain compliant without facing the mounting user license fees associated with traditional archiving and ediscovery solutions.

Read more