[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$faVQdpcOJhZ8t3M9zoQOprQeNpSPz9NAk_FFBXz5Q9jw":3},{"article":4,"iocs":40,"watch_terms":41,"solutions":42,"lesson":131},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":27},"d3cea90e-8ba4-4e9c-b881-9d5582e94b35","Only 13% of OT Network Segments Keep Operational Technology Isolated","only-13-of-ot-network-segments-keep-operational-technology-isolated-58f240","New research from Forescout Vedere Labs has found that critical operational and medical devices are frequently sharing network segments with IT and IoT assets, potentially giving attackers more opportunities to move laterally following an initial compromise. The cybersecurity research team analysed 47,700 real-world network segments containing more than 2.5 million devices across 209 organisations. Devices […] The post Only 13% of OT Network Segments Keep Operational Technology Isolated appeared first on IT Security Guru.","Forescout Vedere Labs research indicates a significant lack of network segmentation in operational technology (OT) environments. Only 13% of analyzed OT network segments were found to be isolated, with critical OT and medical devices frequently sharing segments with IT and IoT assets. This lack of segmentation creates more opportunities for attackers to move laterally within networks after an initial compromise.","New research reveals only 13% of OT network segments are isolated, increasing attack surface.","https:\u002F\u002Fwww.itsecurityguru.org\u002F2026\u002F09\u002F22\u002Fonly-13-of-ot-network-segments-keep-operational-technology-isolated\u002F?utm_source=rss&utm_medium=rss&utm_campaign=only-13-of-ot-network-segments-keep-operational-technology-isolated",null,"2026-09-22T13:57:11+00:00","2026-09-22T14:00:44.519432+00:00",7,[17,20],{"name":18,"type":19},"Vedere Labs","product",{"name":21,"type":22},"Forescout","vendor","d6f63bb8-0801-486a-be7f-171400700454",{"id":23,"icon":12,"name":25,"slug":26},"IoT\u002FOT","iot-ot",[28,33,35],{"category":29},{"id":30,"icon":12,"name":31,"slug":32},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":34},{"id":23,"icon":12,"name":25,"slug":26},{"category":36},{"id":37,"icon":12,"name":38,"slug":39},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[21,18],{"controls":43,"vendors":130},[44,72,101],{"slug":45,"name":46,"problem":47,"products":48},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",[49,56,64],{"vendor_slug":50,"vendor_name":51,"vendor_logo":52,"product_slug":53,"product_name":51,"url":54,"description":55},"lansweeper","Lansweeper","\u002Fvendor-logos\u002Flansweeper.png","lansweeper-asset-inventory","https:\u002F\u002Fwww.lansweeper.com\u002Fproduct\u002Fasset-inventory\u002F","Discovery with and without agents that keeps one central, always-updated inventory of devices, software and their details.",{"vendor_slug":57,"vendor_name":58,"vendor_logo":59,"product_slug":60,"product_name":61,"url":62,"description":63},"runzero","runZero","\u002Fvendor-logos\u002Frunzero.png","runzero-platform","runZero Platform","https:\u002F\u002Fwww.runzero.com\u002Fplatform\u002F","Finds and fingerprints everything on the network and in the cloud, including IoT and OT devices, without agents or credentials, and flags exposures.",{"vendor_slug":65,"vendor_name":66,"vendor_logo":67,"product_slug":68,"product_name":69,"url":70,"description":71},"axonius","Axonius","\u002Fvendor-logos\u002Faxonius.png","axonius-cyber-assets","Axonius Cyber Assets","https:\u002F\u002Fwww.axonius.com\u002Fplatform\u002Fcyber-assets","A continuously reconciled view of every asset, who owns it, which security controls cover it and where it drifts from policy.",{"slug":73,"name":74,"problem":75,"products":76},"network-segmentation","Network segmentation and microsegmentation","One compromised machine can no longer reach everything else.",[77,85,93],{"vendor_slug":78,"vendor_name":79,"vendor_logo":80,"product_slug":81,"product_name":82,"url":83,"description":84},"threatlocker","ThreatLocker","\u002Fvendor-logos\u002Fthreatlocker.png","zero-trust-endpoint-firewall","Zero Trust Endpoint Firewall","https:\u002F\u002Fwww.threatlocker.com\u002Fcapabilities\u002Fzero-trust-endpoint-firewall","Centrally managed host firewall with device-level and dynamic access rules, to limit which machines can talk to each other.",{"vendor_slug":86,"vendor_name":87,"vendor_logo":88,"product_slug":89,"product_name":90,"url":91,"description":92},"akamai","Akamai","\u002Fvendor-logos\u002Fakamai.png","guardicore-segmentation","Akamai Guardicore Segmentation","https:\u002F\u002Fwww.akamai.com\u002Fproducts\u002Fakamai-guardicore-segmentation","Software-based microsegmentation with traffic visibility.",{"vendor_slug":94,"vendor_name":95,"vendor_logo":96,"product_slug":97,"product_name":98,"url":99,"description":100},"illumio","Illumio","\u002Fvendor-logos\u002Fillumio.png","illumio-segmentation","Illumio Segmentation","https:\u002F\u002Fwww.illumio.com\u002Fillumio-segmentation","Maps traffic between workloads and enforces segmentation across data centre, cloud and endpoints.",{"slug":102,"name":103,"problem":104,"products":105},"ot-security","OT and industrial control system security","Factory, building and utility control systems get visibility and protection.",[106,114,122],{"vendor_slug":107,"vendor_name":108,"vendor_logo":109,"product_slug":110,"product_name":111,"url":112,"description":113},"tenable","Tenable","\u002Fvendor-logos\u002Ftenable.png","tenable-ot-security","Tenable OT Security","https:\u002F\u002Fwww.tenable.com\u002Fproducts\u002Fot-security","Asset inventory, vulnerability and threat detection for industrial networks.",{"vendor_slug":115,"vendor_name":116,"vendor_logo":117,"product_slug":118,"product_name":119,"url":120,"description":121},"nozomi-networks","Nozomi Networks","\u002Fvendor-logos\u002Fnozomi-networks.png","guardian","Nozomi Networks Guardian","https:\u002F\u002Fwww.nozominetworks.com\u002Fplatform\u002Fguardian","Passive monitoring, asset inventory and threat detection for OT and IoT networks.",{"vendor_slug":123,"vendor_name":124,"vendor_logo":125,"product_slug":126,"product_name":127,"url":128,"description":129},"dragos","Dragos","\u002Fvendor-logos\u002Fdragos.png","dragos-platform","Dragos Platform","https:\u002F\u002Fwww.dragos.com\u002Fcybersecurity-platform\u002F","OT asset visibility, threat detection and response guidance for industrial environments.",[],{"slug":132,"title":133,"body":134,"framework_refs":135,"framework_notes":145},"87-of-ot-networks-lack-proper-isolation-enabling-lateral-movement","87% of OT Networks Lack Proper Isolation, Enabling Lateral Movement","Forescout Vedere Labs found that only 13% of OT network segments are properly isolated, meaning the vast majority of critical operational technology environments share network space with IT and IoT devices. This flat or poorly segmented architecture dramatically increases the blast radius of any initial compromise, allowing attackers to move laterally from a low-value IT asset to safety-critical OT or medical systems. The convergence of IT and OT without compensating security controls is a well-known risk that continues to be systematically underaddressed. This matters because OT and medical device compromises can have physical, safety, and life-threatening consequences far beyond typical data breaches.",[136,137,138,139,140,141,142,143,144],"CIS Control 12: Network Infrastructure Management","CIS Control 13: Network Monitoring and Defense","NIST SP 800-82 Rev 3: Guide to OT Security","NIST SP 800-53 SC-7: Boundary Protection","NIST SP 800-53 AC-4: Information Flow Enforcement","IEC 62443-3-3: System Security Requirements and Security Levels","NERC CIP-005: Electronic Security Perimeters","ICS-CERT Recommended Practices: Defense-in-Depth Strategies for OT","ITIL: Change and Configuration Management",{}]