State of XIoT Security

In this edition of the State of XIoT Security Report, 2H 2022, you’ll see evidence that vendors are embracing the need to secure cyber-physical systems, and dedicating time, people, and money to not only patching software and firmware vulnerabilities, but also product security teams overall.

Throughout this report, you’ll learn about vulnerabilities impacting industrial control systems, the internet of medical things (IoMT), building automation systems, and enterprise internet of things (IoT) devices that sustain our lives and enable innovation across business and critical infrastructure sectors.

Recognizing the critical need to understand the XIoT risk and vulnerability landscape, Team82 developed an automated collection and analysis tool that ingests vulnerability data from trusted open sources, including the National Vulnerability Database (NVD), the Industrial Control Systems Cyber Emergency Response Team (ICS-CERT), CERT@VDE, MITRE, and industrial automation vendors Schneider Electric and Siemens.