Only 13% of OT Network Segments Keep Operational Technology Isolated
New research reveals only 13% of OT network segments are isolated, increasing attack surface.
Forescout Vedere Labs research indicates a significant lack of network segmentation in operational technology (OT) environments. Only 13% of analyzed OT network segments were found to be isolated, with critical OT and medical devices frequently sharing segments with IT and IoT assets. This lack of segmentation creates more opportunities for attackers to move laterally within networks after an initial compromise.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Forescout?
Get an email when a new story names Forescout, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonForescout Vedere Labs found that only 13% of OT network segments are properly isolated, meaning the vast majority of critical operational technology environments share network space with IT and IoT devices. This flat or poorly segmented architecture dramatically increases the blast radius of any initial compromise, allowing attackers to move laterally from a low-value IT asset to safety-critical OT or medical systems. The convergence of IT and OT without compensating security controls is a well-known risk that continues to be systematically underaddressed. This matters because OT and medical device compromises can have physical, safety, and life-threatening consequences far beyond typical data breaches.
What helps against this
How we list vendors- Cyber asset inventory
You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.
- Network segmentation and microsegmentation
One compromised machine can no longer reach everything else.
- OT and industrial control system security
Factory, building and utility control systems get visibility and protection.