66% of CPS incidents include the compromise of human-machine interfaces (HMI) or supervisory control and data acquisition (SCADA) systems that control industrial processes.

82% of attacks against cyber-physical systems involve using Virtual Network Computing (VNC) protocol clients to remotely access exposed internet-facing assets.