Cybercrims: When we hit IT, they sometimes pay, but when we hit OT... jackpot

Manufacturing organizations faced a surge in ransomware and data-theft activity in 2023, with Dragos reporting that 70% of industrial ransomware infections hit manufacturing (638 entities across 33 subsectors). The report highlights an ongoing ransomware incident at PSI Software, a critical CVSS 9.8 Microsoft Message Queuing vulnerability (CVE-2023-21554) affecting Mitsubishi Electric machines, and LAURIONITE exploiting Oracle E-Business Suite flaws to perform lateral movement and data exfiltration, underscoring supply-chain and IT-to-OT risk.