Summary Points
- Manufacturing remains the top target for cyberattacks, mainly due to its critical role in supply chains and increased adoption of connected technologies, leading to expanded attack surfaces.
- Ransomware accounts for over 90% of financial losses, with misconfigured multi-factor authentication (MFA) being the primary cause of the most expensive incidents.
- Key security controls—such as auditing MFA deployment, improving vulnerability management, and enforcing procedural safeguards for financial transactions—can significantly reduce cyber risk.
- Rising threats from IoT devices, AI-enhanced attacks, and the slow adoption of quantum-resistant encryption highlight the need for continuous security improvements and better cyber risk quantification.
Underlying Problem
The recent Resilience report reveals that the manufacturing sector continues to be the primary target of cyberattacks, primarily because of its essential role in global supply chains and its vulnerability to operational disruptions. Over nearly five years of analyzing cyber insurance claims, the report found that ransomware is responsible for over 90% of the financial losses, despite accounting for only about 12% of claims. This situation arises largely because many manufacturing companies have adopted connected technologies rapidly but still operate with underfunded security programs. Consequently, preventable control failures, especially misconfigured multi-factor authentication (MFA), are often the main cause of costly incidents; in fact, MFA misconfigurations alone account for approximately 26% of total losses, highlighting that poor implementation is a key vulnerability.
Furthermore, the report emphasizes that enhancing specific, targeted security measures can significantly reduce these risks. For instance, regularly auditing MFA deployment, strengthening vulnerability management for external-facing systems, and implementing procedural controls for financial transactions are crucial steps. It also warns that the expanding use of Internet of Things (IoT) devices in manufacturing plants—projected to more than double by 2030—raises the attack surface, especially as AI-powered attacks and other sophisticated threats evolve. Overall, the report, backed by detailed claims data and threat intelligence, aims to inform security leaders about where to focus efforts, including better risk quantification and insurance strategies, to defend manufacturing organizations effectively against high-impact cyber threats.
What’s at Stake?
The report reveals that manufacturing industries are the most targeted by cyberattacks, especially ransomware, which causes the biggest financial losses. If your business falls into this sector, it faces a high risk of being hit by malicious attacks that can freeze operations and drain resources. Because cybercriminals are increasingly focusing on manufacturing, your company could experience devastating disruptions, data breaches, or costly downtime. Furthermore, even small attempts can escalate quickly without proper defenses, making the threat unavoidable. As a result, ignoring these risks could threaten your entire operation, reputation, and profitability. Therefore, it’s essential to understand that cyber threats are not just an IT issue but a critical business concern, requiring proactive security measures.
Possible Remediation Steps
In today’s rapidly evolving digital landscape, the importance of swift and effective remediation cannot be overstated, especially as manufacturing industries emerge as prime targets for cyberattacks like ransomware, leading to significant operational disruptions and financial losses.
Assess and Prioritize
- Conduct comprehensive risk assessments to identify vulnerabilities.
- Prioritize critical assets and systems for immediate attention.
Enhance Prevention
- Implement robust firewall and intrusion detection systems.
- Use strong, unique passwords and multi-factor authentication.
Develop Response Plans
- Create and regularly update incident response strategies.
- Train staff on cybersecurity best practices and awareness.
Backup and Recovery
- Maintain regular, encrypted backups of essential data.
- Test recovery procedures through simulated drills.
Patch and Update
- Apply security patches promptly to software and hardware.
- Keep firmware and applications current to close known vulnerabilities.
Collaborate and Share
- Engage with industry partners for threat intelligence sharing.
- Participate in cybersecurity information exchanges and forums.
Monitor Continuously
- Use real-time monitoring tools to detect anomalies early.
- Maintain ongoing vulnerability scanning and threat assessments.
Continue Your Cyber Journey
Explore career growth and education via Careers & Learning, or dive into Compliance essentials.
Explore engineering-led approaches to digital security at IEEE Cybersecurity.
Disclaimer: The information provided may not always be accurate or up to date. Please do your own research, as the cybersecurity landscape evolves rapidly. Intended for secondary references purposes only.
Cyberattacks-V1
