Dragos + Phosphorus: xOT Defense-in-Depth Starts Now
Summary: Dragos completed the first phase of its Phosphorus acquisition in under 60 days, releasing Dragos Platform version 3.2.5, which pushes Phosphorus device intelligence directly into the Dragos asset inventory with no exported spreadsheets or manual work. Phosphorus uses patented Intelligent Active Discovery over native device protocols to return verified firmware versions, certificate posture, credential status, and specific vulnerabilities, and Dragos reports that roughly 70% of IoT and OT devices ship with default credentials, 68% carry CVSS 8 or higher vulnerabilities, and 26% are end-of-life.
What's compelling: Dragos states that in real deployments as many as 30% of the devices Phosphorus discovers were previously unknown to the organization - devices that network-based discovery alone never surfaced and that no inventory, and therefore no advisory response, accounted for.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026