Microsoft Warns of Surge in Cyber Attacks Targeting Internet-Exposed OT Devices

Microsoft, CISA, Rockwell Automation, Claroty and others warn of repeated attacks against internet-exposed OT/ICS devices since late 2023, where adversaries (including pro-Russia hacktivists and other named groups) manipulated HMIs and deployed destructive malware (Fuxnet) to corrupt and physically disable sensor gateways; the reporting emphasizes weak passwords, known vulnerabilities and direct internet exposure as primary attack vectors and urges improved OT security hygiene and zero trust practices.