What Can Reach Your Critical OT Systems, and Should It?
Summary: Dragos released a Segmentation product that analyzes firewall, router, and switch configurations from more than 25 vendors to model a topology, reveal permitted paths, and trace unexpected access back to the specific rules allowing it. The company reports that 81% of its architecture reviews found poor IT/OT segmentation, and it attributes drift to operational rules that stay in place after the work that justified them finishes.
Bottom line: The access that lets a vendor finish an installation or an engineer restore an outage is the same access an attacker can use to move laterally toward control systems, and NERC CIP, Australia's SOCI rules, TSA directives, and NIS2 each now require evidence that it is controlled.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026