Sandworm Hackers Shift From IT Breaches to Critical OT Targets

2026-05-15

Threat actor Sandworm is expanding operations from IT network infiltration to targeting operational technology environments. This increases the risk of physical disruption to global critical infrastructure, marking a significant escalation in the group's cyber warfare capabilities and potential for real-world impact.