Cyber Risks · Dragos Blog

The Top 10 ICS/OT Cybersecurity Blogs Worth Revisiting from 2022

Summary: Dragos compiled a list of its top ICS/OT cybersecurity blogs from 2022, covering topics including the 2021 ICS/OT Cybersecurity Year in Review, network segmentation for flat ICS/OT networks, and the PIPEDREAM modular ICS attack framework, which the post describes as the seventh known ICS-specific malware. Other entries cover TSA Security Directive Pipeline-2021-02C, which took effect in July 2022, ransomware response guidance from OT-CERT head Dawn Cappelli, and aligning five critical controls with CISA/NIST performance goals.

Key Takeaway: The post names PIPEDREAM as the seventh known ICS-specific malware and describes it as a modular framework an adversary could use to cause disruption, degradation, or possibly destruction - a reminder that purpose-built tooling aimed at industrial processes keeps accumulating, and the reference material for defending against it is already several years old.

Read the original at Dragos Blog ↗

Topics
OT / ICS & Critical Infrastructure
Related
Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026