Rockwell's ICS Directive Comes as Critical Infrastructure Risk Peaks

Rockwell Automation urged customers to immediately disconnect Internet-exposed industrial control systems due to elevated nation-state and criminal cyber activity and numerous exploitable CVEs; the report warns that exposed PLCs and legacy ICS devices (thousands observed via Shodan) risk denial-of-service, privilege escalation, lateral movement, safety-manipulation, remote PLC compromise, and potentially destructive attacks, and recommends disconnecting or tightly limiting connectivity, improving asset management, patching, and configuration controls.