WaterISAC Navigation
  • About
  • Report Incident
  • Contact Us
  • Become a Member
  • NRWA Signup
  • WaterISAC Champions
  • About
  • Report Incident
  • Contact Us
  • Become a Member
  • NRWA Signup
  • WaterISAC Champions
Home Posts Threat Awareness – Firmware Attacks Precipitated by Legacy Devices and Hybrid Work Models
Become a Member

Log in

  • Upcoming Events
  • Resource Center
  • Tools
  • Webcasts
  • Contaminant Databases
  • Community Partners
  • About
  • Log in

  • My Account

  • Logout

  • Report Incident
  • Contact Us
  • NRWA Signup
  • WaterISAC Champions
More Resources

Threat Awareness – Firmware Attacks Precipitated by Legacy Devices and Hybrid Work Models

Author: Jennifer Walker

Created: Thursday, June 30, 2022 - 2:17

Categories: Cybersecurity

The threat of compromise via firmware attacks is becoming an increasing concern for IT professionals. Between hybrid work models and continued reliance on legacy systems, it’s increasingly more challenging for IT staff to secure firmware on devices that may not be in the office or older systems that simply don’t support device security.

According to a survey by HP Wolf Security, 83 percent of IT leaders surveyed believe that firmware attacks against laptops and PCs now pose a significant threat as many workers are now remote. Furthermore, the legacy devices that were created before resilience considerations for hardware and firmware were a concern, pose greater risk of suffering a disruptive attack. Ultimately, “Firmware attacks are very disruptive and much harder to detect or remediate than your typical malware – often requiring expert and even manual intervention to fix. This increases the cost and complexity of remediation considerably, particularly in hybrid environments where devices are not on site for IT teams to access,” said Dr. Ian Pratt, global head of security for personal systems at HP. Read more at HelpNetSecurity.

Related Resources

(TLP:CLEAR) Vulnerability Notification – Critical Vulnerability in Fortinet EMS Actively Exploited, CVE-2026-35616

May 29, 2026 in Cybersecurity, Security Preparedness

(TLP:CLEAR) GAO Report: Actions Needed to Address Persistent Cybersecurity Threats to the Water and Wastewater Sector

May 28, 2026 in Cybersecurity, Federal & State Resources, OT-ICS Security

(TLP:CLEAR) FBI Releases Multiple Alerts on Credential Theft and Evolving Ransomware Intrusion Techniques

May 28, 2026 in Cybersecurity, Federal & State Resources, Security Preparedness

Become a Member
FAQs
About
Report Incident

Terms & Conditions
Privacy Policy
AI Policy
Contact Us

LinkedIn

1250 I Street NW, Suite 350
Washington, DC 20005
1-866-H2O-ISAC (1-866-426-4722)
© 2026 WaterISAC. All Rights Reserved.

Toggle the Widgetbar