--- title: "Ok, Computer: Reducing the risk of a cybersecurity attack on the manufacturing floor." url: https://thefrontlinefactor.com/article/ok-computer-reducing-the-risk-of-a-cybersecurity-attack-on-the-manufacturing-floor description: "The Frontline Factor — While the manufacturing industry has improved its approach to cybersecurity according to research firm Black Kite, there is still a way…" lang: en --- Ok, Computer: Reducing the risk of a cybersecurity attack on the manufacturing floor. 0% ~5 min left Back to Insights: https://thefrontlinefactor.com/insights New Article Technology & AI # Ok, Computer: Reducing the Risk of a Cybersecurity Attack on the Manufacturing Floor. Saj Hoffman-Hussain: https://thefrontlinefactor.com/author/saj-hoffman-hussain Published September 29, 2026 5 min read Image: Featured image for Ok, Computer: Reducing the risk of a cybersecurity attack on the manufacturing floor. (https://ltxhatjzliqihghpxxhe.supabase.co/storage/v1/object/public/assets/1789759325690-photovoltaics-factory-colleagues-optimize-production-flow-using-mockup-pc.jpg) Image: Saj Hoffman-Hussain (https://ltxhatjzliqihghpxxhe.supabase.co/storage/v1/object/public/assets/1767758577381-0113D7E6-00F9-45B1-8D25-ECE3D961711C_1_105_c.jpeg) Saj Hoffman-Hussain (https://thefrontlinefactor.com/author/saj-hoffman-hussain)Editor-in-Chief @ The Frontline Factor Saj Hoffman-Hussain on LinkedIn: https://www.linkedin.com/in/sajad-hoffman-hussain/ From The Frontline Factor The Frontline Factor — While the manufacturing industry has improved its approach to cybersecurity according to research firm Black Kite, there is still a way to go to handle credential exposures that risk access to vital systems on the manufacturing floor. Learn as an operator how you can minimize the risk. In This Article Share Discussion ## Manufacturers fixed the number they could see On Sept. 17, the security firm Black Kite published a report zooming in on manufacturing. The headline found that among the 1,000 largest manufacturers surveyed, exposure to security vulnerabilities fell from 67% to 54% (https://www.manufacturingdive.com/news/manufacturing-cybersecurity-weaknesses-ransomware-black-kite/830752/) in two years (source: CISA). Technology security is improving more generally which is great. Credential exposure however, did not move at all and remains an ongoing problem in the industry. ## Patching improved because patching has a shape Give the sector its due here. Black Kite's researchers called the vulnerability numbers "evidence that prioritizing known-exploited flaws works when the sector's largest companies commit to it," and they are right to. A patch is a discrete object. It has a version number, a queue, a maintenance window, and a report that turns green when the work is done. A plant can schedule it. A board can ask about it. Credentials behave nothing like that. They leave through information-stealing malware that quietly siphons them off for resale, and nothing turns red when it happens. The login still works. The person still shows up for their shift. The account keeps opening the door it was built to open, for whoever is holding the keys. But it just so happens that there's a secret pair you don't know about. ## Where those credentials actually come from Reading that finding from an operations chair rather than a security one, the picture changes. **The access list is a staffing list.** In July 2026 alone, 286,000 people separated from US manufacturing jobs (https://www.bls.gov/news.release/jolts.t03.htm), according to BLS. Every one of those is also an access event: a badge, a terminal login, a scheduling app, an LMS account, an email box. The staffing churn is visible to HR in real time, while the access churn usually is not visible to anyone. **Shared hardware produces shared logins.** A line terminal, a handheld scanner, a break-room kiosk that six people touch in an hour. Named accounts on that hardware slow the line down, so plants make a throughput decision and move on. It is a reasonable call. It is also the reason a stolen credential can belong to nobody in particular. **Offboarding runs on a different clock than the final shift.** Supervisors know within a day when someone stops coming. The ticket that closes their access may not exist for a week, if the process depends on a manager remembering to file it. **Home and work credentials are frequently the same credentials.** IBM's 2026 X-Force Threat Intelligence Index found that "password reuse across personal and enterprise accounts continues to create indirect attack paths, where low-value consumer credentials are leveraged for high-value enterprise access." The same report notes that manufacturing remained the most targeted industry (https://www.ibm.com/think/x-force/threat-intelligence-index-2026-securing-identities-ai-detection-risk-management) of the year. None of that is a technology gap. It is a lifecycle gap, and the lifecycle belongs to the people who run schedules and headcount. ## The firms absorbing the attacks have the fewest people to manage the risks. Black Kite counted more than 1,180 ransomware victims in manufacturing since the start of 2026, more than the annual totals for 2023 and 2024. Disclosures over the first seven months ran 40% above the 2025 figure. Seven in 10 of those victims were mid-market firms, between $10 million and $100 million in annual revenue. "The mid-sized manufacturers absorbing most of these attacks are the supplier layer from which larger enterprises assemble their products," researchers wrote. "When the mid-market is the primary target, a large manufacturer's vendor list is its attack surface." Be blunt about what a company that size actually has. Not an identity governance function. A plant manager, an HR generalist, and someone covering the ERP alongside three other jobs. Telling that team to mature its access posture accomplishes nothing. Telling them that access changes the day someone is hired, moved, or let go, with one name against it, is a request they can act on this quarter. Image: credential exposure chart (https://ltxhatjzliqihghpxxhe.supabase.co/storage/v1/object/public/assets/1789759223592-credential-exposure-chart.svg) ## How to lower the risk of a security attack **Access is provisioned against the schedule.** If the workforce management system knows someone moved from receiving to packaging on Monday, that is the authoritative signal, not a form filed later. **Someone in operations owns the list.** IT can run the tooling. Only the floor knows who is actually on it this week. **Shared hardware still gets individual identity.** Badge tap, PIN, or a fast second factor at the terminal keeps the line moving and keeps a name on the session. **Termination and deprovisioning are one step, not two.** If the two live in separate systems with separate owners, the gap between them is the exposure, and it will keep showing up in somebody's stealer log. ## The Frontline Take The one thing you can take away from cybersecurity is that its always hard to keep up with the plethora of new exploits; one a patch is made, inevitably a workaround is found. When you're working with equipment in a highly regulated manufacturing environment that is run digitally, as an operator you need to be confident that guardrails are in place to prevent bad actors from imitating frontline employees. Key Takeaway When you're working with equipment in a highly regulated manufacturing environment that is run digitally, as an operator you need to be confident that guardrails are in place to prevent bad actors from imitating frontline employees. Image: Key takeaway (https://ltxhatjzliqihghpxxhe.supabase.co/storage/v1/object/public/assets/1789759325690-photovoltaics-factory-colleagues-optimize-production-flow-using-mockup-pc.jpg) ## Related Articles ### Sweet Frontline, Alabama: Google is investing $1.5bn in Data Centers Google has announced a new, $1.5 billion investment across 2026 and 2027 in Jackson County to expand its data center campus, alongside new energy affordability and community education initiatives. Published Jun 17, 2026 4 min https://thefrontlinefactor.com/article/google-expands-alabama-data-centers-a-blueprint-for-frontline-investment ### Do it Yourself, Frontline: Why AI Self-service is the Future of HR Support Manufacturers in 2026 are increasingly adopting AI-self-service chatbots to help with routine HR queries. Is this a good thing, and how do leaders embrace this shift while keeping the human in HR? Published Jun 2, 2026 6 min https://thefrontlinefactor.com/article/diy-frontline-why-ai-self-service-is-the-future-of-hr-support ### Ready or Not, Here AI Come (to the Manufacturing Frontline) AEM's 2026 outlook calls the human-machine handoff manufacturing's defining workforce priority, then names the constraint: value depends on human capability. The technology and capability plans are one program in that framing. In most companies they are two, on two clocks. Published Aug 5, 2026 5 min https://thefrontlinefactor.com/article/ready-or-not-here-ai-come-to-the-frontline Executive Briefing Stay Ahead of Frontline Transformation Monthly insights for retail and manufacturing leaders — research-backed strategies delivered to your inbox. No spam. Unsubscribe anytime. CONTRIBUTE ### Write for The Frontline Factor Share your frontline insights with thousands of HR, Ops, and Finance leaders. We welcome practitioner perspectives, case learnings, and data-backed analysis from the field. ## Structured data ```json [ { "@context": "https://schema.org", "@type": "Organization", "@id": "https://thefrontlinefactor.com/#organization", "name": "The Frontline Factor", "alternateName": [ "Frontline Factor", "TFF" ], "url": "https://thefrontlinefactor.com", "logo": { "@type": "ImageObject", "url": "https://thefrontlinefactor.com/og-image.jpg" }, "description": "The Frontline Factor is a digital publication delivering actionable frameworks, industry intelligence, and leadership insights for frontline leaders in retail, manufacturing, healthcare, and logistics.", "knowsAbout": [ "Frontline workforce leadership", "Retail operations", "Manufacturing operations", "Healthcare workforce", "Logistics operations", "HR leadership", "HR technology", "Employee engagement", "Workforce retention", "Frontline productivity" ], "publishingPrinciples": "https://thefrontlinefactor.com/mission", "ethicsPolicy": "https://thefrontlinefactor.com/mission", "sameAs": [ "https://www.linkedin.com/company/thefrontlinefactor" ], "contactPoint": { "@type": "ContactPoint", "email": "hello@thefrontlinefactor.com", "contactType": "customer service" } }, { "@context": "https://schema.org", "@type": "WebSite", "@id": "https://thefrontlinefactor.com/#website", "name": "The Frontline Factor", "alternateName": "Frontline Factor", "url": "https://thefrontlinefactor.com", "description": "The Frontline Factor — actionable frameworks and leadership insights for frontline leaders in retail, manufacturing, healthcare, and logistics.", "publisher": { "@id": "https://thefrontlinefactor.com/#organization" }, "inLanguage": "en-US", "potentialAction": { "@type": "SearchAction", "target": { "@type": "EntryPoint", "urlTemplate": "https://thefrontlinefactor.com/insights?q={search_term_string}" }, "query-input": "required name=search_term_string" } }, { "@context": "https://schema.org", "@type": "Article", "headline": "Ok, Computer: Reducing the risk of a cybersecurity attack on the manufacturing floor.", "description": "While the manufacturing industry has improved its approach to cybersecurity according to research firm Black Kite, there is still a way to go to handle credential exposures that risk access to vital systems on the manufacturing floor. Learn as an operator how you can minimize the risk.", "author": { "@type": "Person", "name": "Saj Hoffman-Hussain", "url": "https://www.linkedin.com/in/sajad-hoffman-hussain/" }, "publisher": { "@type": "Organization", "@id": "https://thefrontlinefactor.com/#organization", "name": "The Frontline Factor", "url": "https://thefrontlinefactor.com", "logo": { "@type": "ImageObject", "url": "https://thefrontlinefactor.com/og-image.jpg" } }, "isPartOf": { "@id": "https://thefrontlinefactor.com/#website" }, "datePublished": "2026-09-29T19:16:34.575+00:00", "dateModified": "2026-10-07T01:43:28.810278+00:00", "mainEntityOfPage": { "@type": "WebPage", "@id": "https://thefrontlinefactor.com/article/ok-computer-reducing-the-risk-of-a-cybersecurity-attack-on-the-manufacturing-floor" }, "articleSection": "Technology & AI", "keywords": "cybersecurity, digital-transformation, identity-management", "image": "https://ltxhatjzliqihghpxxhe.supabase.co/storage/v1/object/public/assets/og/6215049d48992c74-1200x630.jpg", "speakable": { "@type": "SpeakableSpecification", "cssSelector": [ "#speakable-frontline-summary", ".speakable-key-takeaway", "#the-frontline-take" ] } }, [ { "@context": "https://schema.org", "@type": "Claim", "text": "The headline found that among the 1,000 largest manufacturers surveyed, exposure to security vulnerabilities fell from 67% to 54% in two years (source: CISA).", "datePublished": "2026-09-29T19:16:34.575+00:00", "appearance": { "@type": "WebPage", "url": "https://thefrontlinefactor.com/article/ok-computer-reducing-the-risk-of-a-cybersecurity-attack-on-the-manufacturing-floor" }, "author": { "@type": "Person", "name": "Saj Hoffman-Hussain", "url": "https://www.linkedin.com/in/sajad-hoffman-hussain/" }, "isPartOf": { "@type": "Article", "url": "https://thefrontlinefactor.com/article/ok-computer-reducing-the-risk-of-a-cybersecurity-attack-on-the-manufacturing-floor", "headline": "Ok, Computer: Reducing the risk of a cybersecurity attack on the manufacturing floor." } }, { "@context": "https://schema.org", "@type": "Claim", "text": "Disclosures over the first seven months ran 40% above the 2025 figure.", "datePublished": "2026-09-29T19:16:34.575+00:00", "appearance": { "@type": "WebPage", "url": "https://thefrontlinefactor.com/article/ok-computer-reducing-the-risk-of-a-cybersecurity-attack-on-the-manufacturing-floor" }, "author": { "@type": "Person", "name": "Saj Hoffman-Hussain", "url": "https://www.linkedin.com/in/sajad-hoffman-hussain/" }, "isPartOf": { "@type": "Article", "url": "https://thefrontlinefactor.com/article/ok-computer-reducing-the-risk-of-a-cybersecurity-attack-on-the-manufacturing-floor", "headline": "Ok, Computer: Reducing the risk of a cybersecurity attack on the manufacturing floor." } }, { "@context": "https://schema.org", "@type": "Claim", "text": "Seven in 10 of those victims were mid-market firms, between $10 million and $100 million in annual revenue.", "datePublished": "2026-09-29T19:16:34.575+00:00", "appearance": { "@type": "WebPage", "url": "https://thefrontlinefactor.com/article/ok-computer-reducing-the-risk-of-a-cybersecurity-attack-on-the-manufacturing-floor" }, "author": { "@type": "Person", "name": "Saj Hoffman-Hussain", "url": "https://www.linkedin.com/in/sajad-hoffman-hussain/" }, "isPartOf": { "@type": "Article", "url": "https://thefrontlinefactor.com/article/ok-computer-reducing-the-risk-of-a-cybersecurity-attack-on-the-manufacturing-floor", "headline": "Ok, Computer: Reducing the risk of a cybersecurity attack on the manufacturing floor." } } ], { "@context": "https://schema.org", "@type": "BreadcrumbList", "itemListElement": [ { "@type": "ListItem", "position": 1, "name": "Home", "item": "https://thefrontlinefactor.com/" }, { "@type": "ListItem", "position": 2, "name": "Insights", "item": "https://thefrontlinefactor.com/insights" }, { "@type": "ListItem", "position": 3, "name": "Technology & AI", "item": "https://thefrontlinefactor.com/insights?category=Technology%20%26%20AI" }, { "@type": "ListItem", "position": 4, "name": "Ok, Computer: Reducing the risk of a cybersecurity attack on the manufacturing floor.", "item": "https://thefrontlinefactor.com" } ] } ] ```