NIST Publishes Guide for Protecting ICS Against USB-Borne Threats

According to SecurityWeek, NIST has published a new guide designed to help organisations reduce cybersecurity risks associated with the use of removable media devices in operational technology environments. The guide, NIST Special Publication 1334, was authored by the National Cybersecurity Center of Excellence (NCCoE) and concentrates on USB flash drives, while also mentioning other removable media such as external hard drives and CD/DVD drives.

It notes that USB drives are often used in OT for firmware updates or diagnostics but can be a source of malware infections, and that threats are becoming increasingly sophisticated and OT-targeted. The publication condenses guidance into four areas: procedural controls, physical controls, technical controls, and transportation and sanitisation, with recommendations ranging from policy development and device inventory to disabling unnecessary ports, malware scanning, and encrypting data on portable media.

It also mentions that Honeywell has been offering dedicated cybersecurity solutions to protect industrial facilities from USB-borne threats. The article is dated 1 October 2025.