Network Segmentation Failures Are Expanding the Corporate Attack Surface
Forescout finds nearly half of OT and medical segments also hold IT or IoT, widening lateral movement.
Forescout analyzed 47,700 real-world network segments and found the average held 54 devices spanning IT, OT, IoT, and IoMT. Nearly half of segments with OT or medical devices also contained IT or IoT, and only 2% of IP-camera segments held cameras alone. Forescout says mixed segments enable lateral movement: Akira used poorly segmented cameras to bypass EDR in early 2025, and pro-Russian NoName057(16) was linked to more than 300 IP-camera takeovers in 2026, including Estonian and Canadian targets.
- Forescout analyzed 47,700 segments; the average held 54 devices of four types.
- Only 13% of OT segments and 6% of IoMT segments were single-category.
- Just 2% of IP-camera segments contained cameras alone, often beside servers.
- Akira used poorly segmented cameras to bypass EDR; NoName057(16) compromised cameras in 2026.
- Forescout urges smaller segments, policy-based access, and continuous drift monitoring.
- Vendors
- Forescout
- Threat actors
- AkiraNoName057(16)
- Organizations
- Forescout
From the original article
2 min read at infosecurity-magazine.com
Forescout warns that incomplete network segmentation is widening the potential blast radius of attacks
By Phil Muncaster · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.