Mixed OT and IoMT network segments commonly co-locate IT and IoT devices, expanding lateral-movement risk
Trend
Summary
Hide ▲
Show ▼
Forescout found that nearly half of OT or IoMT network segments also contain IT and IoT, expanding the blast radius for lateral movement across organizations. The analysis covered 47,700 real-world network segments and showed that mixed-device layouts are common, not exceptional. Segments averaging 54 devices create more opportunities for cross-zone exposure when IT, OT, IoT, and IoMT share the same path. The pattern raises the risk that a single compromise can spread from devices like IP cameras into workstations and servers.
Related Happenings
Policy-based segmentation hardening for mixed OT/IoMT/IT/IoT networks
Defensive Guidance
H score14
First: 22.09.2026 15:00
Last: 22.09.2026 15:00
Sources 1
How related:
Implement policy-based access controls between segments, so devices only communicate with the systems required for their function
About this happening:
Security teams managing mixed OT/IoMT/IT/IoT segments are being urged to tighten segmentation controls to reduce lateral movement risk. The guidance emphasizes continuou...
Policy-based segmentation hardening for mixed OT/IoMT/IT/IoT networks
Defensive GuidanceHow related: Implement policy-based access controls between segments, so devices only communicate with the systems required for their function
About this happening: Security teams managing mixed OT/IoMT/IT/IoT segments are being urged to tighten segmentation controls to reduce lateral movement risk. The guidance emphasizes continuou...
Internet-exposed Rockwell Automation/Allen-Bradley PLCs concentrated in the United States
Trend
H score32
First: 10.04.2026 18:52
Last: 10.04.2026 18:52
Sources 1
About this happening:
A measured exposure pattern shows 5,219 internet-facing Rockwell Automation/Allen-Bradley PLC hosts worldwide, expanding the attack surface for industrial control netw...
Internet-exposed Rockwell Automation/Allen-Bradley PLCs concentrated in the United States
TrendAbout this happening: A measured exposure pattern shows 5,219 internet-facing Rockwell Automation/Allen-Bradley PLC hosts worldwide, expanding the attack surface for industrial control netw...
Iran-linked proxy cyber-physical device scanning campaign
Campaign
H score35
First: 27.03.2026 16:42
Last: 27.03.2026 16:42
Sources 1
About this happening:
Iran-linked proxies are widening scans for vulnerable cyber-physical devices, increasing the risk of opportunistic access across specific countries and the private s...
Iran-linked proxy cyber-physical device scanning campaign
CampaignAbout this happening: Iran-linked proxies are widening scans for vulnerable cyber-physical devices, increasing the risk of opportunistic access across specific countries and the private s...
Timeline
-
22.09.2026 15:00 2 articles · 1h ago
Forescout links mixed OT and IoMT segments to higher lateral-movement risk
Technical Analysis UpdateForescout's analysis of 47,700 real-world network segments found that nearly half of segments containing OT or medical devices (IoMT) also included IT and IoT, broadening the attack surface and increasing lateral-movement risk. The report also said the average segment held 54 devices across IT, OT, IoT, and IoMT, while cameras often shared segments with workstations and servers.
Show sources
- Network Segmentation Failures Are Expanding the Corporate Attack Surface — www.infosecurity-magazine.com — 22.09.2026 15:00
- Network Segmentation Failures Are Expanding the Corporate Attack Surface — www.infosecurity-magazine.com — 22.09.2026 15:00