Cyber Risks · Dragos Blog

Dragos 2021 Industrial Cybersecurity Year In Review Summary

Summary: Dragos reports that in 2021 major incidents hit industrial organizations, including a compromise of a water treatment facility with intent to poison its community and a ransomware attack on a pipeline operator that disrupted gas supplies to the southeastern United States. Dragos researchers analyzed 1,703 ICS/OT CVEs during the year, more than twice as many as the prior year, and discovered three new activity groups assessed as targeting ICS/OT, two of which reached Stage 2 of the ICS Cyber Kill Chain.

Key Takeaway: Ransomware became the number one attack vector in the industrial sector, and two of the three newly identified groups already demonstrated direct access to ICS/OT networks - a capability that turns a headline about a pipeline or water plant into a question about your own segmentation.

Read the original at Dragos Blog ↗

Topics
OT / ICS & Critical Infrastructure
Related
Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026