Visibility Was Never the Finish Line
Summary: Dragos argues that most organizations still lack real OT visibility, holding only stale asset lists and spreadsheets rather than detail on firmware versions, patch levels, credentials, and configuration changes. The company is extending its platform beyond sensor-covered OT into IT, cloud, and hybrid environments through an Exposure Management capability, and adding Software and Supply Chain analysis covering firmware and binary analysis, SBOM generation, and open-source provenance, following its acquisitions of NetRise and runZero.
What's compelling: Dragos' own framing is that an inventory stopping at make and model is a directory, not defense, and that two identical PLCs on the same line can carry wildly different risk depending on firmware, patch level, and who holds credentials. The gap it names is the one a network sensor never looks at: what is inside compiled code and firmware before a device reaches the operational environment.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026