Industrial control systems (ICS) are critical to infrastructure, yet over 145,000 ICS devices are exposed to the internet globally, according to a recent report by internet intelligence firm Censys. Spread across 175 countries, 38% of these devices are in North America, 35% in Europe, and 22% in Asia. In the United States alone, the number of exposed systems has risen to 48,000, up from 40,000 reported previously.

What Are Internet-Exposed ICS?

ICS devices manage essential operations in industries like manufacturing, agriculture, and water systems. They rely on protocols like Modbus, BACnet, and Siemens S7, making them accessible for legitimate use—but also vulnerable to cyberattacks.

Regional trends show:

• North America favors Fox, BACnet, and C-More protocols.
• Europe frequently uses Modbus, S7, and IEC 60870-5-104.

Why Is This Dangerous?

Many exposed devices are human-machine interfaces (HMIs)—a top target for attackers. Censys found that:

• 34% of C-More HMIs connect to water systems, making them attractive for attackers.
• 23% are linked to agriculture, posing risks to food supply chains.

Alarmingly, nearly 200 hosts with exposed HMIs also run equipment from vendors banned under the U.S. National Defense Authorization Act (NDAA) Section 889, raising additional security concerns.

Cyber Threats on the Rise

A separate survey by Kaspersky highlights the stakes:

• 90% of UK industrial companies have faced cyberattacks, with nearly half experiencing major disruptions.
• 72% of respondents feel their automated supply chains are vulnerable.

Top threats include:

• Vulnerabilities in IoT and connected devices.
• Unauthorized access to manufacturing systems.
• DDoS attacks and insider threats.

The Takeaway

These findings underscore the urgency of securing ICS environments. Operators must evaluate the devices, protocols, and software running in their networks to mitigate risks, especially as connected technologies proliferate.

Act now to protect your industrial systems. Reach out to Cyber Safe Business to assess your vulnerabilities and implement robust defenses against cyberattacks.