Trustwave highlights cybersecurity risks in manufacturing

Trustwave has published a series of reports highlighting cybersecurity threats faced by the manufacturing sector as it increasingly integrates digital and physical systems, making it a prime target for cybercriminals.

The annual report from Trustwave SpiderLabs explores key trends within the manufacturing industry, notably the rise in ransomware attacks, the convergence of operational technology (OT) and information technology (IT), and the broadening threat landscape. The report breaks down the tactics, techniques, and procedures used by threat actors throughout various attack stages, providing manufacturers with critical insights to bolster their cybersecurity measures.

Trustwave SpiderLabs has also released detailed analyses on the leading concerns within the sector, specifically addressing the risks surrounding IT/OT convergence and the evolving tactics of cybercriminals who target manufacturers. These reports present thorough research alongside practical risk mitigation strategies, equipping manufacturers with an understanding of the prevailing threat landscape.

Trustwave's Chief Information Security Officer, Kory Daniels, commented on the evolving technological landscape within manufacturing: "The manufacturing industry is embracing new technologies and ways of working that are driving efficiency, productivity, and innovation speed."

He continued, "It's exciting to see AI-powered machines, smart factories, digital twins, and 3D printing in action, but it's impossible not to consider the potential risks. This isn't just about data breaches anymore—compromised systems can lead to production shutdowns, environmental disasters, and even worker injuries. Rapid innovation demands red teaming and testing to keep up with the pace, or we risk inadvertently prioritising business benefits over known risks."

The report emphasises the increasing complexity of cybersecurity within the manufacturing field due to the sector's dependence on interconnected systems that extend across shop floors, enterprise networks, and supply chains. The IT and OT integration creates numerous new attack vectors, leaving manufacturers susceptible to various cyber threats, including ransomware attacks that can disrupt production and data breaches that compromise sensitive intellectual property.

More critically, incidents involving OT systems pose significant safety risks. A security breach in an industrial control system could result in dangerous malfunctions, hazardous material releases, or even physical injuries on production floors.

The 2025 research series from Trustwave SpiderLabs on the manufacturing sector comprises the Trustwave Risk Radar Report, a detailed exploration of the IT/OT convergence, and an analysis of methods used for targeting and breaching manufacturers. Some key findings include that 54% of ransomware attacks occurred in the United States, with 19% attributed to Play, and 14% targeting machinery manufacturers. Phishing was the origin of 87% of attacks, and 86% of credential access attempts were brute-force attacks.