How AI can help close IoT’s growing security gaps to contain ransomware – Top Tech News>
– Top Tech
According to the given information, the manufacturing sector is the most attacked industry today, with 70% of all ransomware attacks targeting this sector. Industrial control systems (ICS) equipment and engineering are also frequently targeted, accounting for 16% of attacks. The attacks primarily exploit unprotected gaps between operational technology (OT) and IT systems, as well as unprotected ICS.
The report highlights that 75% of OT organizations have experienced at least one breach intrusion in the past year. Nation-state attackers and criminal gangs are recruiting AI and machine learning experts to develop generative AI attack tools, which adds to the sophistication and efficiency of attacks.
The attackers often employ social engineering, reconnaissance, and deepfakes, and they have a deeper understanding of the target’s network compared to the administrators themselves. The attacks are becoming faster, more efficient, and increasingly incorporate advanced techniques like deepfakes and social engineering.
Manufacturing CISOs have observed a shift in attack strategies, including the use of deepfakes and advanced social engineering, indicating a faster and more efficient approach. The attackers are targeting processing plants, distribution centers, and R&D facilities with unprecedented intensity.
CISOs express concerns that defensive AI has fallen behind offensive AI, giving attackers the upper hand. As a result, there is growing interest in using AI-based cybersecurity applications and tools, with 35% of CISOs already utilizing AI for security purposes and 61% planning to adopt such technology within the next 12 months.
Ransomware attacks are a significant threat to the manufacturing industry, resulting in production disruptions and large ransom demands. Manufacturing organizations are advised to focus on building strong security measures throughout their security cycle and leverage assistive AI tools to offload time-consuming tasks and prioritize strategic security activities.
The Cybersecurity and Infrastructure Security Agency (CISA) has also reported a rise in attacks on infrastructure and manufacturing, issuing 19 ICS advisories as evidence. The attacks typically start by targeting unprotected IoT, IIoT, and programmable logic controllers (PLC), aiming to penetrate deeper into the network.
Nation-state attackers are investing in AI arsenals to make political statements or launch ransomware attacks. Soft targets such as energy, water, oil infrastructure, healthcare, and manufacturing are particularly attractive due to the potential for widespread disruption and significant financial losses.
The article emphasizes the importance of eliminating blind spots associated with unmanaged or unsupported legacy systems. Organizations should prioritize discovery, segmentation, and identity management for IoT endpoints to enhance security. Additionally, greater visibility and analysis across IT and OT systems enable security teams to identify and address vulnerabilities more effectively.
Companies like Honeywell, CrowdStrike, and Ivanti are actively involved in IoT cybersecurity, offering a range of solutions to close IoT gaps, improve visibility, and mitigate threats. These solutions incorporate AI and ML technologies to provide real-time threat detection, monitoring, and adherence to standards and compliance frameworks.
In summary, protecting against ransomware attacks requires continuous investment in strong security measures and the adoption of assistive AI tools. Manufacturing and infrastructure organizations must address the vulnerabilities in their OT and IT systems, as well as implement comprehensive IoT security measures to combat the increasing sophistication of attacks.
Link: https://toptech.news/how-ai-can-help-close-iots-growing-security-gaps-to-contain-ransomware/