Remote Access Sprawl Strains Industrial OT Network Security

Claroty Team82 analysis finds pervasive remote access tool sprawl in industrial/OT environments—55% of devices use four or more RATs and many organizations run insecure or unsupported tools—creating a large, Internet-accessible attack surface that has been exploited in past breaches (e.g., Colonial Pipeline) and targeted by ransomware and cryptominer campaigns; the report urges full inventory, removal of low-security tools, implementation of MFA/auditing/session recording, and governance of third-party access.