2025 OT Cybersecurity Year in Review Report
Summary: Dragos's 2024 review records VOLTZITE infrastructure interacting heavily with a U.S. telecommunications provider and command-and-control beaconing from a major U.S. city's emergency services GIS, activity Dragos assesses as a long-term data collection campaign. The year also included CyberArmyofRussia_Reborn disrupting a Texas industrial facility in January and posting video of access to HMI devices at water facilities in Indiana and New Jersey and an oil and gas facility in Texas, plus the FrostyGoop attack that cut heating to over 600 apartment buildings in Ukraine for two days in sub-zero temperatures.
What you should know: VOLTZITE has not yet shown disruptive ICS capability, but the data it is collecting could either build such a tool or inform contingency planning - meaning the beaconing found in a city's emergency services GIS may be groundwork rather than an incident.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026