New Knowledge Pack Released (KP-2023-001)
Summary: Dragos released Knowledge Pack KP-2023-001 for Platform 2.x customers, containing over 280 characterizations and 540 detections, after assessing newly disclosed vulnerabilities in more than 900 products from vendors including Mitsubishi Electric, Siemens, Phoenix Contact, Moxa, Rockwell Automation, and Digital Alert Systems. The pack adds detections for malware using a modified LZMA algorithm across multiple shellcode layers to hide remote access tools in memory, a possible Boa Webserver exploit enabling arbitrary file access, and three new dashboards covering Environment Overview, Vulnerability Assessment, and NERC CIP.
What's compelling: The pack's NERC CIP dashboard maps to Electronic Security Perimeter, System Security Management, and BES Cyber System Categorization - and Dragos states plainly it is not a replacement for a fully resourced compliance program, so the evidence it surfaces still has to be owned by someone.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026