Forescout Report Reveals Rising Risks of Connected Devices in 2026

Forescout Technologies' '2026 Riskiest Connected Devices' report indicates a significant shift in cybersecurity risks, with network infrastructure now deemed the highest-risk category in IT environments. The report highlights that routers account for approximately one-third of critical vulnerabilities, with an average of 32 vulnerabilities per device. A total of 11 new device types have entered the riskiest category, marking the second-largest year-over-year increase on record. These devices, including serial-to-IP converters and medication dispensing systems, often operate with outdated firmware and default credentials, making them attractive targets for attackers. The report emphasizes the exploitation of east-west traffic, allowing adversaries to move laterally within networks. Organizations are increasingly connecting specialized and unmanaged devices, expanding the attack surface significantly. The report identifies three new entries targeting operational technology (OT) environments, including power distribution units (PDUs) and BACnet routers. Barry Mainz, CEO of Forescout, stresses the importance of containment as a modern cybersecurity strategy.

Key Points: • Network infrastructure has surpassed endpoints as the highest-risk category in cybersecurity. • Routers account for one-third of critical vulnerabilities, averaging 32 vulnerabilities each. • 11 new device types have been added to the riskiest category, reflecting a rapidly diversifying attack surface.