OT Cybersecurity Lessons Learned from the Frontlines
Summary: Dragos reports that in 2025, 30 percent of its incident response cases began with unexplained operational issues, ahead of malware and ransomware at 23 percent each, and most incidents caused at least a one-week outage. Across its services work, poor IT/OT segmentation appeared in 81 percent of reports, 49 percent included elevated remote access findings, and 88 percent of organizations in tabletop exercises struggled with detection.
Bottom line: Fewer than 5 percent of services reports could identify end-of-life or unsupported assets, so most defenders cannot tell which vulnerabilities actually threaten operations. With adversaries entering through exposed systems and trusted remote pathways, the gap that decides whether an event stays manageable is visibility, not patching speed.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026