Minimizing the Consequences of Shared Credentials Across IT and OT Environments
Summary: Dragos's 2021 Year In Review found that 44% of its services engagements included findings related to shared credentials, accounts used in both IT and OT networks, down from 54% in 2020. The same review found 77% of engagements included a finding of improper network segmentation, and Dragos notes shared credentials were scarce in Electric, Nuclear, and Chemical but frequent in Rail, Water, and Food & Beverage.
What you should know: An adversary who compromises one administrator account reused across endpoints holds the keys to every one of them, and with 77% of assessments also showing weak segmentation, that single account can be the path from corporate IT to the ICS assets Dragos calls the Crown Jewels.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026