Hackers threaten critical infra
Industrial facilities, hospitals and other critical infrastructure operators face growing cybersecurity risks as equipment once isolated from the internet becomes increasingly connected, cybersecurity firm Tenable has warned.
Meir Asiskovich, Tenable’s senior director of product management and head of critical infrastructure security, said organizations can no longer assume their operational technology (OT) systems are protected simply because they were designed to operate independently of external networks.
“Organizations that still believe their operational technology networks are completely isolated from the outside world (air-gapped) in 2026 should think again. Attackers are moving much faster, making broad visibility into both internal and external attack paths critical,” Asiskovich said.
OT systems control physical equipment and industrial processes, including manufacturing machinery, refrigeration, air conditioning and other building systems.
As more facilities adopt remote monitoring and maintenance, previously isolated systems may become accessible through network connections, creating opportunities for cyberattacks.
Asiskovich warned that attackers could exploit weak passwords, software vulnerabilities and unsecured connections to interfere with operations.
He said artificial intelligence could also lower the technical barriers for attackers seeking to exploit vulnerable systems.
The risks extend beyond factories to hospitals, research laboratories and facilities storing sensitive biological materials, where disruptions to refrigeration and temperature controls could have serious consequences.
The warning comes as cybersecurity authorities emphasize stronger protection for connected industrial systems.
In updated guidance released in September, the US National Institute of Standards and Technology identified operational technology security as essential to protecting infrastructure while maintaining reliability and safety.
Security agencies have also recommended limiting unnecessary internet exposure, strengthening authentication and monitoring remote connections to industrial equipment.