Report Highlights Weak Authentication in U.S. Industrial Control Systems

U.S. critical infrastructure. The assessment identifies multiple technical weaknesses that allow unauthorized access to operational technology networks. These networks manage physical processes in sectors such as energy, water, and manufacturing.

FDD documented cases where industrial control systems remained accessible from the public internet without multi-factor authentication. The report notes that many devices continue to use default passwords and outdated firmware. Security researchers cited in the report found that several exposed systems lacked basic network segmentation.

This configuration allows lateral movement once an initial compromise occurs.

U.S. critical infrastructure in recent months. S. government agencies. The assessment recommends that operators implement network isolation, enforce strong authentication, and conduct regular vulnerability scans. No specific incidents resulting in physical damage were detailed in the report.