OT/ICS Radar · liveUpdated — · refreshed every hour

What is being exploited against industry today

Exploited vulnerabilities, new OT vendor advisories and the entry points attackers use, from public sources and refreshed every hour.

0newly exploited vulnerabilitiesCISA KEV catalog ·
0in VPN, firewall and remote accessThe usual door from IT into OT
0new ICS advisories CVEs in total · CISA ICS
0critical advisories (CVSS ≥ 9)Most affected sector:
1 · Exploited now

The way in: VPNs, firewalls and remote access

Edge devices with vulnerabilities that are already being actively exploited. This is how attackers usually get into the plant network before touching a PLC.

AddedCVEVendor · productTypeEPSSRansomware
Loading data…

Source: CISA Known Exploited Vulnerabilities · 30-day exploitation probability: EPSS, first.org/epss.

Trend · 12 weeks

Exploited vulnerabilities per week

Edge devices (VPN, firewall, remote access)Other

OT vendors with the most advisories

CISA ICS ·

Most affected sectors

ICS advisories that list the sector ·

2 · Vendor advisories

New ICS advisories

What CISA and vendors published for control systems, newest first. Filter by sector or search for your vendor.

PublishedAdvisoryVendor · productMax CVSSCVEsSectors
Loading data…

Source: CISA ICS Advisories (CSAF 2.0).

0 advisories in the period ·

Do you run these vendors in your plant?

In 15 minutes the OT assessment shows how exposed your network is and where to start.

Take the OT assessment
3 · AI in the attack surface

AI tools are already a target

Agent orchestrators, model gateways and automation tools already have exploited vulnerabilities. If your team installs them next to the plant network, they are a door too.

0exploited in AI tools

CISA KEV · since ·

    Real and demonstrated cases

    MITRE ATLAS · cases

    Sources: CISA KEV · MITRE ATLAS™.

    4 · Global context

    Application-layer and DDoS attacks by industry and country

    Cloudflare Radar publishes global layer 3 and layer 7 attack trends from its network.

    See it on Cloudflare Radar ↗

    Healthcare Radar · ihumans.io
    Medical devices and hospitals

    See the Healthcare radar on iHumans ↗
    Sources and methodology. CISA Known Exploited Vulnerabilities, CISA ICS Advisories (CSAF 2.0), EPSS (first.org/epss), MITRE ATLAS™ and Cloudflare Radar. "Edge devices" = VPN, firewall, secure email, SD-WAN and remote access. Data refreshed every hour.
    For guidance only. The radar summarizes public sources; it does not replace the vendor advisory or an assessment of your installation. Before patching in a plant, validate with the vendor and your operations team.