Cyber Risks · Dragos Blog

Assessing Threats to European Industrial Infrastructure

Summary: Dragos assesses with high confidence that the biggest cybersecurity weaknesses European asset owners face are a lack of asset visibility into their networks and weak network authentication policies. Ten Dragos Activity Groups have conducted operations targeting European entities, and as of February 2022 Dragos had validated 1,301 advisories covering 3,286 CVEs affecting industrial equipment worldwide, of which 216 advisories (483 CVEs) directly impact Europe.

Key Takeaway: Dragos rates Europe at low risk for widespread destructive campaigns but only low confidence that localized disruption won't happen, and it names geographically dispersed operations - renewable generation, oil and gas, water, electric transmission - as the particular concern. The 483 Europe-specific CVEs sit in equipment European operators already run, and Dragos says defenders cannot protect what they cannot see.

Read the original at Dragos Blog ↗

Topics
OT / ICS & Critical Infrastructure
Related
Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026