A new OT-IoT security trends report from Nozomi Networks Labs finds that while ransomware and Ransomware as a Service attacks continued to dominate cybercriminal activity in the second half of 2021, there was a slight uptick in state-sponsored actions as global tensions rise.

Critical infrastructure such as healthcare, transportation and food production are increasingly seen as highly vulnerable and lucrative targets based on their ability to disrupt society. More than 651 vulnerabilities were reported from July through December—a 21-percent increase over the previous six months. Supply chain vulnerabilities continue to offer the greatest opportunity to quickly spread damage across a wide range of products, service providers or end users.

Vulnerability disclosures increased 21% in the second half of 2021

“Security organizations and law enforcement are punching back,” said Nozomi Networks Co-founder and CTO Moreno Carullo. “We are seeing some good signs that more security professionals are modernizing their defenses to address both prevention and resiliency, and that a post-breach mindset is paying off. Threats may be on the rise, but technologies and practices to defeat them are available now as we have greater insights into the nature of the vulnerabilities and attacks. We encourage more organizations to strengthen their security and situational awareness so they too are prepared in the face of an attack.”

Nozomi Networks’ “OT/IoT Security Report” provides security professionals with the latest insights needed to re-evaluate risk models and security initiatives, along with actionable recommendations for securing critical infrastructure.