The Best Ways to Mitigate Cybersecurity Breaches in the Manufacturing Sector

The manufacturing sector is a prime target of threat actors in 2024. According to NTT’s Global Threat Intelligence Report, manufacturing was the most attacked sector in 2023, with over 25% of reported incidents. The report also indicates that ransomware payments increased in 2022 and totaled more than one billion dollars. Research shows that about one in four industrial facilities had to temporarily shut down operations to address a cybersecurity incident.

Based on the above statistics, cybersecurity is of major importance to manufacturing companies. Disruptions and unscheduled outages can cripple a manufacturer and affect many other organizations dependent on its supply chain. We are going to discuss the importance of cybersecurity, common threats, and best practices to mitigate these threats. We will also take a close look at several attacks on manufacturers to illustrate the scope of the threat to the sector and society.

Why Cybersecurity is Important in Manufacturing

The importance of cybersecurity in the manufacturing sector is increasing for several reasons. Manufacturers are often targeted by cybercriminals because of their role in supporting critical infrastructure. Threat actors believe manufacturers will be more motivated to accede to their demands due to the rippling effects of an outage throughout society, making it more likely the victimized organization will pay the ransom.

Another reason manufacturers make enticing targets for hackers is the increased connectivity accompanying the adoption of Industry 4.0 and the Internet of Things (IoT). The deployment of IoT devices and robots presents threat actors with a large and often unsecured attack surface.

These issues are complicated by the lack of cybersecurity awareness displayed by many manufacturers. In some cases, they have not implemented the necessary measures to protect their environment. Decision-makers in the industry need to understand the seriousness of the threats and take the necessary steps to secure their organizations.

Common Cybersecurity Threats to Manufacturing

Manufacturers are especially prone to several types of cyberattacks and need to take appropriate precautions to minimize the risks. Following are some of the most common threats that affect the manufacturing industry.

• Ransomware and malware attacks can halt production lines and be extremely costly. When manufacturers involved in critical infrastructure are attacked, the stakes are raised substantially and there is increased pressure to pay the hackers as soon as possible.
• Phishing and social engineering are used to gain access to the environment to plant ransomware or other types of malware. Threat actors are leveraging tools such as generative AI platforms to develop more sophisticated phishing campaigns.
• Industrial espionage may be initiated by rivals to cause disruptions or steal intellectual property. The loss of trade secrets can destroy a company’s competitive advantages.
• Indiscriminate use of malware attacks may impact small manufacturers and factories. Automation and connected networks are necessary components of modern manufacturing facilities. Attacks on an OT network can spread to the IT network and result in data breaches.

Case Studies of Notable Cybersecurity Breaches Affecting Manufacturers

The following case studies demonstrate the extent to which a cyberattack can impact a manufacturer.

• Norsk Hydro, a major aluminum producer, was hit with a ransomware attack in March 2019 that affected U.S. factories and smelting plants in Norway. The company had to disable computerized processes and revert to manual procedures to maintain operations. Estimates of the cost of the attack range from $35 to $70 million.
• Yanfeng International Automotive Technology Co. Ltd, one of the top automotive parts suppliers for GM and Chrysler, Jeep, Dodge, and Ram in North America, was hit by a ransomware attack in November 2023. Factory production was impacted for several weeks as the company attempted to recover from the attack.
• Cleaning products manufacturer Clorox was impacted by a cyberattack in August 2023 that resulted in widespread disruptions. The effects included product shortages to consumers and order-processing delays. The company estimates the cost of the attack at more than $49 million.

Best Practices for Mitigating Cybersecurity Breaches

Manufacturers can take multiple steps to mitigate cybersecurity breaches that threaten their businesses and customers.

• Promote employee training and awareness programs. An example of a reliable training program is this offering from the SANS Institute. Everyone in the organization should understand their responsibilities in protecting the company from cyberthreats.
• Adopt a proven cybersecurity framework such as the National Institute of Standards and Technology's (NIST) framework. The use of a framework provides companies with a proven and standardized approach to improving their cybersecurity posture.
• Implement advanced threat detection and response technologies such as Samurai XDR. An XDR solution enables companies to engage in threat hunting to identify risks to their environments before they can cause damage.
• Perform regular audits and penetration testing to identify and address new vulnerabilities. Effective testing can replicate the methods employed by threat actors so organizations can deploy appropriate defensive measures.

Future Trends in Manufacturing Cybersecurity

Manufacturers need to be aware of some future trends and developments that will affect cybersecurity. The following examples illustrate some challenges and potential solutions for cybersecurity in the manufacturing sector.

Blockchain implementation in the manufacturing sector can provide several benefits including enhanced security. The distributed nature of a blockchain makes systems harder to compromise and the immutable records it contains cannot be altered. These features can help manufacturers tighten security and avoid cyberattacks.

Regulatory changes such as those defined in the U.S. Cybersecurity Maturity Model Certification (CMMC) address the need to safeguard sensitive national security information used by the Defense Department of Defense’s (DoD) industrial base. It accomplishes this by:

• Simplifying compliance through allowing self-assessment for some requirements;
• Applying priorities for protecting DoD data;
• Facilitating cooperation between the DoD and industry regarding evolving cyber threats.

Conclusion

Organizations operating in the manufacturing sector are being targeted by threat actors. Ransomware and other types of cyberattacks are on the rise and can cause expensive damage to victimized companies. The addition of Samurai XDR to an existing cybersecurity stack gives manufacturers advanced threat detection to secure their IT environments.

Samurai XDR provides organizations with the following benefits.

• Consolidated and prioritized threat information helps small teams address the most impactful risks.
• Advanced detection capabilities uncover threats missed by traditional security solutions.
• The platform leverages the superior threat intelligence of NTT's Tier 1 ISP, which analyzes more than 40% of the internet for unmatched threat detection and response capabilities.

Try Samurai’s 30-day free trial to see this superior threat detection platform in action.