Lessons Learned From Examining More Than a Decade of Public ICS/OT Exploits
Summary: Dragos tracks more than 3,000 CVEs affecting ICS and OT networks, of which more than 400 have at least one publicly available exploit, some with multiple. The company says its public ICS/OT exploits span every level of the Purdue Model, were developed by hundreds of individuals, affect products from more than a hundred vendors, and are used by multiple Activity Groups it tracks.
Bottom line: More than 400 ICS/OT vulnerabilities have ready-made exploits anyone can download, and Dragos maps most of them to Levels 1, 2, and 3 - inside the ICS network, not at its edge.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026