OT/IoT Cybersecurity Trends and Insights

Digital Operational Resilience Act (DORA): Effective from Jan 17, 2025, DORA mandates that financial institutions and their ICT providers ensure resilience tovarious ICT-related disruptions.

New York State Legislation: In June 2025, New York enacted a law requiring local governments and public authorities to report cyberattacks within 72 hours.

Superannuation Funds Credential Stuffing Attacks: In April, several major Australian superannuation funds, including AustralianSuper, Rest, Hostplus, Insignia, and Australian Retirement Trust, were targeted in coordinated credential stuffing attacks.

Clutch Industries Ransomware Attack: In January, Clutch Industries, an Australian auto parts manufacturer, suffered a ransomware cyber-attack, resulting in the data leak.

Genea Fertility Clinic Ransomware Attack: In February 2025, Genea, a prominent Australian IVF provider, suffered a ransomware attack by the Termite group, resulted in a leak of sensitive patient data.

Iran-Backed Cyber Threat Warning: In June 2025, U.S. security agencies issued a joint fact sheet warning about the ongoing threat of cyberattacks from Iran-backed proxy cyber actors and hacktivist groups.