Skip to content

Topic

ICS (Page 5)

All articles on ICS.

Industrial OT network with unauthorized devices connected to switches and PLCs in a manufacturing plant

Cybersecurity

Shadow Devices in OT Networks: The Assets Nobody Knows They Have

Maintenance laptops left connected, 4G modems installed by vendors, uncatalogued switches: shadow devices in OT networks are more common than you think and represent concrete blind spots for security.

5 min read
Supply chain attack diagram against industrial OT environments

Cybersecurity

Supply Chain Attacks in OT: The Vector That Bypasses the Physical Perimeter

Supply chain attacks are among the hardest to detect and prevent. In industrial OT, the supplier chain is often long, poorly monitored, and holds privileged access to control systems.

3 min read
Technical diagram of hardware TAP and SPAN port on an industrial switch in an OT Purdue network

Cybersecurity

TAP vs SPAN Port in OT Environments: How to Choose Where to Place Sensors

Passive OT traffic monitoring depends on where and how traffic is captured. Hardware TAPs and SPAN ports have very different characteristics in industrial environments: a wrong choice means incomplete data or operational risks.

6 min read
Industrial plant control room with safety systems highlighted and anomaly indicators on Safety Instrumented Systems

Cybersecurity

Triton/TRISIS: When Attackers Target Industrial Safety Systems

Triton/TRISIS is the first documented malware designed to disable Safety Instrumented Systems — the systems that prevent physical industrial accidents. Its impact goes beyond the targeted plant: it changes the perimeter of what must be monitored.

5 min read
Water treatment plant with SCADA systems and field IoT sensors

Cybersecurity

Cybersecurity in Water Networks: The Water/Wastewater Sector as a Forgotten Critical Infrastructure

Water and wastewater treatment plants are critical infrastructures with often obsolete OT systems and exposed remote connections. A sector that industrial cybersecurity still struggles to reach.

3 min read
Zero Trust architectural diagram applied to an industrial OT network

Cybersecurity

Zero Trust in OT: Applicable Principles and Real Limits in Industrial Environments

Zero Trust is the security framework of the moment, but applying it to OT environments requires pragmatism: here is what actually works and where the model shows its limits.

4 min read
Abstract illustration: artificial intelligence and vulnerability discovery in OT systems

Cybersecurity

AI changed vulnerability discovery: but there is an OT gap you cannot ignore

New AI models discover vulnerabilities autonomously and at industrial scale. But the tools stay tuned for IT: the OT world risks falling behind just as attackers accelerate.

2 min read
Industrial control room with cybersecurity alarms and network anomaly indicators

Cybersecurity

Sandworm in Industrial Environments: What the Data Really Tells Us

An analysis of over 5 million alerts shows how Sandworm targets OT environments: weeks of ignored signals before the real impact lands.

2 min read
Monitoring platform screen mapping OT and IoT assets in an industrial plant

Cybersecurity

OT/IoT Asset Visibility: Why It Is the First Pillar of Security

You cannot protect what you cannot see: complete OT/IoT asset visibility is the foundation of every industrial cybersecurity strategy.

2 min read
Representation of a compromised industrial PLC affected by a chain of CODESYS vulnerabilities

Cybersecurity

CODESYS Under Attack: Three Chained Flaws to Plant a Backdoor in a PLC

Three chained CVEs in the CODESYS Control runtime let a Service user replace the PLC application with a backdoored version and run code as root.

3 min read
Industrial network diagram with sensors mapping PLCs, HMIs and OT devices across the levels of the Purdue model

Cybersecurity

How to Achieve Complete OT/ICS Asset Visibility

A hands-on guide to building a complete OT/ICS asset inventory: sensors, passive and active discovery, DPI and behavioral baselines without stopping production.

2 min read
WAGO industrial PLC controller with status indicators and field cables connected in an electrical panel

Cybersecurity

WAGO PLC Vulnerabilities: The Chain That Leads to Full Control

Eight vulnerabilities in the WAGO 750-8216 PLC can be chained to obtain root privileges on the device. Technical analysis and plant impact.

2 min read
MON5.EU

OT (Operational Technology) cybersecurity for manufacturing plants. Map, identify, monitor and protect your industrial network.

🇮🇹MON5 S.R.L. · Italy
Bologna · Via Paolo Nanni Costa 20
Faenza · Corso Aurelio Saffi 21
VAT IT02725300392
🇱🇺AARG S.à.r.l. · Luxembourg
49, Boulevard Royal
L-2449 Luxembourg
VAT LU35998569
Coesione Italia 21-27 Emilia-Romagna · Co-funded by the European Union · Ministero delle Imprese · Regione Emilia-Romagna
© 2026 MON5 · All rights reserved