IoT and OT threats

IoT and OT threats

IoT and OT threats refer to cybersecurity risks targeting Internet of Things (IoT) devices and operational technology (OT) systems, which are key components of industrial and critical infrastructure environments. Explore insights into recent vulnerabilities, attack trends, and defense strategies to help secure these devices and systems.

- July 2, 2024
- 7 min read
Vulnerabilities in PanelView Plus devices could lead to remote code execution

Microsoft discovered and responsibly disclosed two vulnerabilities in Rockwell’s PanelView Plus that could be remotely exploited by unauthenticated attackers, allowing them to perform remote code execution (RCE) and denial-of-service (DoS).
- May 30, 2024
- 9 min read
Exposed and vulnerable: Recent attacks highlight critical need to protect internet-exposed OT devices

Since late 2023, Microsoft has observed an increase in reports of attacks focusing on internet-exposed, poorly secured operational technology (OT) devices.
- August 10, 2023
- 10 min read
Multiple high severity vulnerabilities in CODESYS V3 SDK could lead to RCE or DoS

Microsoft researchers identified multiple high-severity vulnerabilities in the CODESYS V3 SDK that could put operational technology (OT) infrastructure at risk of attacks, such as remote code execution (RCE) and denial of service (DoS).
- June 22, 2023
- 11 min read
IoT devices and Linux-based systems targeted by OpenSSH trojan campaign

Microsoft has uncovered an attack leveraging custom and open-source tools to target internet-facing IoT devices and Linux-based systems.
- December 21, 2022
- 12 min read
Microsoft research uncovers new Zerobot capabilities

The Microsoft Defender for IoT research team details information on the recent distribution of a Go-based botnet, known as Zerobot, that spreads primarily through IoT and web-application vulnerabilities.
- December 15, 2022
- 9 min read
MCCrash: Cross-platform DDoS botnet targets private Minecraft servers

The Microsoft Defender for IoT research team analyzed a cross-platform botnet that infects both Windows and Linux systems from PCs to IoT devices, to launch distributed denial of service (DDoS) attacks against private Minecraft servers.
- November 22, 2022
- 6 min read
Vulnerable SDK components lead to supply chain risks in IoT and OT environments

As vulnerabilities in network components, architecture files, and developer tools have become an increasingly popular attack vector to leverage access into secure networks and devices, Microsoft identified such a vulnerable component and found evidence of a supply chain risk that might affect millions of organizations and devices.
- October 21, 2022
- 4 min read
Securing IoT devices against attacks that target critical infrastructure

South Staffordshire PLC, a company that supplies water to over one million customers in the United Kingdom, notified its customers in August of being a target of a criminal cyberattack.
- March 16, 2022
- 6 min read
Uncovering Trickbot’s use of IoT devices in command-and-control infrastructure

The Microsoft Defender for IoT research team has recently discovered the exact method through which MikroTik devices are used in Trickbot’s C2 infrastructure.
- May 18, 2021
- 6 min read
Mitigate OT security threats with these best practices

Chris Sistrunk, a Technical Manager in Mandiant’s ICS/OT Consulting practice, shares best practices to improve operational technology security.

Refine results

Vulnerabilities in PanelView Plus devices could lead to remote code execution

Exposed and vulnerable: Recent attacks highlight critical need to protect internet-exposed OT devices

Multiple high severity vulnerabilities in CODESYS V3 SDK could lead to RCE or DoS

IoT devices and Linux-based systems targeted by OpenSSH trojan campaign

Microsoft research uncovers new Zerobot capabilities

MCCrash: Cross-platform DDoS botnet targets private Minecraft servers

Vulnerable SDK components lead to supply chain risks in IoT and OT environments

Securing IoT devices against attacks that target critical infrastructure

Uncovering Trickbot’s use of IoT devices in command-and-control infrastructure

Mitigate OT security threats with these best practices

Get started with Microsoft Security