New Knowledge Pack Released (KP-2022-004)
Summary: Dragos released Knowledge Pack KP-2022-004, which adds detections for the CHERNOVITE activity group and its PIPEDREAM modular ICS attack framework, alongside over 250 characterizations and 500 detections. Dragos states PIPEDREAM can execute 38 percent of known ICS attack techniques and 83 percent of known ICS attack tactics, targets Omron and Schneider Electric PLCs plus CODESYS, Modbus, and OPC UA, and works through native functionality rather than vendor vulnerabilities.
Why it matters: A framework that covers 83 percent of known ICS attack tactics and could work across hundreds of controllers means the gap between an intrusion and a physical process going down may be shorter than your incident response assumes.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Mentions
- CVE-2022-22536
- Related
- CVE-2022-22536: SAP Multiple Products HTTP Request Smuggling Vulnerability Known Exploited Vulnerabilities · Aug 18, 2022Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026