As attackers shift away from hardened factory systems, the weakest links in manufacturing networks are now the digital forms and portals that move sensitive data across global supply chains. A new Kiteworks survey shows how these overlooked interfaces are driving a surge in breaches, and exposing entire industries through a single compromised entry point.
Hidden Interfaces Are Becoming High-Value Entry Points
Manufacturers have expanded cybersecurity investments around plants, machines, and IP repositories, yet attackers are increasingly exploiting overlooked interfaces that manage day-to-day data exchange with suppliers, OEMs, and customers. Kiteworks’ 2025 Data Security and Compliance Risk: Data Forms Survey Report shows how these routine touchpoints, supplier portals, warranty forms, RMA applications, and dealer interfaces, have become preferred vectors for threat actors targeting regulated sectors.
Tim Freestone, chief marketing officer at Kiteworks, notes that the appeal is structural: these interfaces sit at the crossroads of design data, pricing files, procurement records, and customer information. When compromised, the downstream exposure can hit multiple industries simultaneously. According to trade reports, this reflects a broader pattern seen across manufacturing in 2025, where attackers increasingly target integration layers rather than core infrastructure. The finding aligns with recent industry research showing rising activity in bot-driven credential harvesting and automated exploitation across form-based inputs.
The survey’s data illustrates the scale of the problem. Eighty-eight percent of organizations experienced at least one web-form security incident in the past two years, and 44% confirmed a breach originating from form submissions. Manufacturers routinely collect sensitive data through these channels, including authentication credentials (61%), financial records (58%), payment card data (36%), and government ID numbers (29%). Many legacy portals still route engineering drawings, supplier pricing, and production files without modern encryption or validation controls. As a result, bot attacks (61%), SQL injection (47%), cross-site scripting (39%), session hijacking (28%), and man-in-the-middle attacks (21%) are proliferating across these outdated environments.
Compliance Pressure Is Rising Faster Than Security Maturity
Manufacturers also face widening compliance demands from OEMs, global customers, and regulators. CMMC 2.0 already applies to 14% of organizations tied to defense and aerospace supply chains, and 85% of respondents say data sovereignty now ranks as critical. At the same time, companies must navigate GDPR, PCI DSS, export controls, and a growing list of customer-mandated attestations, all while orchestrating data flows across business units and external partners.
Survey findings show that supplier portals and workflow systems often operate independently, built long before current threats and scattered across product lines, geographic operations, or dealer networks. These silos limit visibility and hinder standardized controls. Although 82% of companies report having real-time threat detection, only 48% have automated incident response, widening the gap between alerting and containment. Mobile exposure adds further complexity: more than 20% of form submissions now originate from mobile devices, yet mobile-specific safeguards remain inconsistently deployed.
A fresh angle emerging across publicly available research is the link between these gaps and broader digital transformation efforts. As manufacturers roll out e-commerce channels, digital service models, and supplier collaboration tools, they unintentionally multiply external touchpoints, creating a larger attack surface than many legacy security architectures were designed to manage.
A Shift Toward Data-Governance Infrastructure
One emerging signal across recent industry reports is that manufacturers strengthening form-security controls are also beginning to treat these interfaces as extensions of their governed data estates, not isolated web utilities. As more companies adopt zero-trust architectures and restructure supplier integrations after high-profile incidents in retail and aerospace this year, the firms that fold form-based workflows into their broader data-governance and identity frameworks will be better positioned to contain cascading risk. This evolution matters: it suggests that the next phase of supply chain cybersecurity may depend less on perimeter hardening and more on bringing every external data touchpoint, no matter how routine, under unified governance.
