Threat Landscape Report: Uncovering Critical Cyber Threats to Manufacturing Sector

This report summarizes August 1, 2024–January 31, 2025 intelligence showing a sharp rise in attacks on manufacturing — including a 130% increase in abuse of external remote services, widespread spearphishing supported by phishing kits, doubling of open-port alerts and exposed OT devices (e.g., 30,000+ Modbus/Unitronics devices), and growing ransomware targeting led by groups like Play — and recommends mitigations such as deceptive endpoints, dynamic access policies, port-knocking, OT encryption, microsegmentation, SBOMs, and phishing-resistant MFA.