FlagThis

Abstract

Manufacturing remains the most attacked industry in the United States, driven by its high-value intellectual property (IP) and critical role in supply chains of other industries. Small and medium manufacturers (SMMs), often hindered by limited resources and outdated legacy systems, are particularly at risk. This report outlines the current state of manufacturing weaknesses introduced by the complexities of modern environments, including cloud services and Internet of Things (IoT) devices, with particular attention paid to the unique vulnerabilities encountered by SMMs. It also highlights CyManIIs strategic initiatives and collaborative solutions to mitigate these risks and strengthen the cybersecurity posture of the manufacturing ecosystem. Emerging cyber threats in todays manufacturing environments include improper input validation, memory safety weaknesses, authentication and access control weaknesses, and third-party weaknesses, providing insights into the evolving landscape of cyberattacks. Even technological advancementssuch as rapid artificial intelligence (AI) adoption, cloud computing, and additive manufacturing (AM)can create opportunities for exploitation. This report calls for manufacturers to prioritize cybersecurity as a core component of their operational excellence strategy. It also discusses the integration of Cyber-Informed Engineering (CIE) and Secure-by-Design (SbD) principles as essential strategies for addressing risks and enhancing resilience within critical operations. Additionally, this report emphasizes the importance of sustained collaboration between industry stakeholders, including initiatives led by CyManII, to advance workforce development and strengthen cybersecurity best practices. Coordinated training, shared technical guidance, and sectorwide implementation of proven controls enable manufacturers to enhance resilience and reduce systemic risk across the industry. Utilizing data from 2025 to inform forwardlooking mitigation strategies, this report provides manufacturers with a clear understanding of both current and emerging cybersecurity threats, as well as practical opportunities to strengthen their cyber ecosystems. The following sections detail key vulnerabilities and threat vectors, along with actionable mitigation strategies, many of which have been developed or piloted through CyManII-led efforts. A thorough understanding of these risks and mitigation strategies is essential for manufacturers seeking to strengthen the security and resilience of their manufacturing operations.