Industrial Cyber

3 days ago | industrialcyber.co | Anna Ribeiro

Honeywell’s Advanced Monitoring and Incident Response (AMIR) service, part of its broader Managed Security Services (MSS) offering, emphasized the importance of consistent policy enforcement and ongoing system hardening to strengthen risk management across operational environments. During the most recent reporting period, AMIR detected 107 unique security incidents, reflecting the diversity and persistence of threats targeting industrial systems.

3 days ago | industrialcyber.co | Anna Ribeiro

New research from Honeywell points to sharp and growing ransomware threats against industrial operators and manufacturers. Ransomware attacks jumped by 46 percent in the first quarter of 2025, with the Cl0p ransomware group emerging as the most active threat actor. During that same quarter, the Honeywell 2025 Cyber Threat Report reported 2,472 new ransomware victims, adding to the 6,130 incidents documented in 2024. The OT (operational technology) layer remains a prime target.

3 days ago | industrialcyber.co | Anna Ribeiro

Researchers from Forescout Technologies‘ Vedere Labs analyzed 35,000 solar power devices, including inverters, data loggers, monitors, gateways, and other communication equipment, which have internet-exposed management interfaces. Their goal was to highlight specific assets and assess geolocated risk. Europe emerged as the clear leader, accounting for 76 percent of the exposed solar power devices.

4 days ago | industrialcyber.co | Anna Ribeiro

The Food and Ag-ISAC has released its updated Cybersecurity Guide for Small and Medium-Sized Enterprises, incorporating findings from the latest Food and Ag Cyber Threat Report. The guide revises previous recommendations and introduces new, practical steps to help businesses improve their cyber defenses. The twelve security practices recognize that organizations are not fully immune to cyber threats, but many of the practices outlined can meaningfully reduce risk, oftentimes at little to no cost.

4 days ago | industrialcyber.co | Anna Ribeiro

The U.S. Department of Homeland Security issued a 30-day notice that the Transportation Security Administration (TSA) has submitted an Information Collection Request (ICR) to the Office of Management and Budget (OMB) for review and approval. The request seeks to extend the current data collection related to pipeline security incidents, apart from the contact details of designated cybersecurity coordinators and their alternates. Interested stakeholders have until July 2 to submit comments.