Returning to the Office? Protect the Machines | UpGuard

This article explains how exposed ports on networked office and industrial devices can serve as attack vectors, citing a CISA penetration test where a printer was abused to capture credentials (MITRE T1557, T1187). It highlights device types and default ports that should not be internet-exposed (e.g., Omron PLC TCP/102, OPC UA 4840) and recommends mitigating controls including closing unnecessary ports, network segmentation, VPN/MFA, automated updates, regular scanning, and continuous monitoring.