Best Practices in OT Vulnerability Management: OT Vulnerability Prioritization is Different
Summary: Dragos reports that published ICS and OT vulnerabilities nearly doubled from 2020 through 2021, based on its analysis of 1,703 ICS/OT CVEs in 2021. The company says only 4% of those flaws required immediate action because they were actively exploited in the wild or had a public exploit available.
Bottom line: With roughly 1,700 OT flaws in a single year and only 4% demanding immediate action, the real exposure sits in the other 96% - and in the standard advisories Dragos describes as riddled with errors and lacking mitigation advice, which your team may be prioritizing against anyway.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026