Q&A: The connectivity revolution and the surge of cyberattacks

Zayo, a global provider of communications infrastructure, in March released its 2026 Cybersecurity Insights Report, which like so many cybersecurity reports from 2024 onward toward today revealed sharp rises in cyberattacks against manufacturing.

This latest one from Zayo noted an escalation in the scale and focus of distributed denial of service attacks, which is a bit of a niche form of data breach but, according to Zayo research and Smart Industry’s own coverage, is gaining in popularity and is being weaponized against industry more and more by threat actors and hacking groups.

Smart Industry podcast: Why is manufacturing such a huge target for cyberattacks?

What is a DDoS cyberattack? Plainly, it’s a malicious attempt to disrupt a website or network by overwhelming it with massive traffic from multiple (and often compromised) sources—a botnet. Unlike a standard denial of service, which uses one computer, a DDoS utilizes thousands of “zombie” devices to render servers unusable for legitimate users, according to Zayo.

And according to its cybersecurity insights report, which is based on global traffic last year, attackers are increasingly shifting beyond telecommunications to strike enterprises and other critical organizations directly.

While total attack volume fell slightly below record highs of 2024, the Boulder, Colorado-based group reported that organizations are still facing all-time, sustained highs in attack frequency, “signaling that DDoS is becoming a defining feature of today’s threat environment.”

See also: Workshop confronts manufacturing execs with the big stakes that ride on proper cybersecurity protocols

Max Clauson, senior VP of network connectivity at Zayo, attributed this surge to the rise in AI, IoT devices, and for-hire botnets, which “has led us into a new era where DDoS attacks are a permanent and highly disruptive reality for all organizations—from manufacturers and retailers to schools and governments.”

See also: How much more proof do you need that cybersecurity should be essential to your plant?

SA: How do manufacturers adjust to the new fact of life that, with the rise of AI and IoT devices, there's so much connectivity that goes with the newer technologies? What new software strategies or safeguards would you/Zayo recommend?

MC: One of the most critical takeaways from our report is that attacks are now faster and more concentrated. Nearly 90% of attacks conclude in under 10 minutes, which means traditional, reactive approaches are simply too slow.

Manufacturers need real-time, automated mitigation that detects and responds to threats as they occur. And that capability needs to be embedded into the network itself, not treated as a separate layer. DDoS protection, SD-WAN, and managed firewall services are all examples of solutions that help manufacturers shift from a reactive to a proactive security approach.

Manufacturers also need to improve visibility and segmentation across environments, especially as more connected devices come online. As systems become more integrated, understanding how traffic flows across the network is critical to quickly identify and stop attacks.

Ultimately, the goal is resilience; ensuring operations can continue even when disruptions occur.

See also: AI is exposing a massive data problem in the supply chain

SA: Will you define attack volume? Is it all about attack frequency or is there something else to "volume"?

MC: When we talk about attack volume, we refer to the overall level of activity over a given period. That includes attack frequency and the total amount of traffic associated with those attacks. Attack size, on the other hand, measures the intensity of an individual event, typically in terms of bandwidth, like gigabits per second.

The research found that the average attack size grew by nearly 70% year-over-year, even as overall volume remains high. What that means for manufacturers is that they need to pay closer attention to the size and concentration of attacks, not just how often they occur.

Both metrics are critical for assessing risk and responding to attacks, especially in industries like manufacturing, where downtime directly impacts financial performance.