F-Secure's report highlights that threat actors are advanced and persistent, but companies are using outdated systems and technology to save money. Poor security posture, prioritization, and awareness are also gifts to attackers.
Malicious actors are targeting critical infrastructure (CNI) sites and energy distribution facilities exponentially. Interconnected systems in the energy industry increase vulnerabilities, and cyber attacks often go undetected for some time.
As energy companies save costs against the backdrop of lower oil prices, consolidating operations can weaken business resilience and redundancy levels. This gives rise to new, single critical points of failure, with any disruption across the supply chain potentially having increased consequences.
"Espionage and sabotage attacks against CNI organizations have increased over the years and I don't think we have seen it all yet," says Sami Ruohonen, Labs Threat Researcher at Finnish cyber security company F-Secure.
Connecting Industrial Control Systems (ICS) to the Internet is increasing, and...