Dragos 2026 OT Cybersecurity Report: a Year in Review
Summary: Dragos reports that adversaries have moved beyond prepositioning in OT environments to actively mapping control loops and learning how to manipulate physical processes. Three new threat groups emerged and established groups expanded globally, with ransomware causing significant operational disruptions, while only a small number of OT networks have the visibility to detect these threats before operational impact.
Bottom line: Some threat groups have reached Stage 2 of the ICS Cyber Kill Chain, conducting reconnaissance, development, and testing inside OT environments to position for future manipulation of industrial processes - and most OT networks cannot see it happening.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026