Latest Dragos Platform Knowledge Pack Release Includes Expanded IoT Asset Categorization, High Severity Playbooks, Plus Critical Threat Detections
Summary: Dragos released a Knowledge Pack Plus update for its Platform containing 688 detections, 3,700 advisories, and 9,900 vulnerabilities affecting more than 23,000 industrial systems from vendors including Siemens, Bosch, Rockwell Automation, SEL, and Phoenix Contact. The update adds expanded IoT asset categorization, over 20 new high-severity playbooks, analytics for the FrostyGoop malware used in an attack on a Ukraine electric entity, and detections for dual-use tools such as PsExec, BITSAdmin, Sysinternals, CCleaner, and ConnectWise ScreenConnect.
Bottom line: Dragos states that in 2023, 70 percent of cyber attacks in OT started in IT networks, and this update adds detections for phishing kits like Greatness and stealers like Racoon Stealer that adversaries use to gain that initial foothold. The same release covers FrostyGoop, the ninth known OT-specific malware, which was employed in an attack on a Ukraine electric entity.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026