Self-Reflection Time: The OSINT Collection Risk Framework
Summary: Dragos describes a framework for assessing how open source intelligence (OSINT) lets adversaries plan ICS attacks, including collecting data on energy infrastructure and physical processes needed to recover from a compromise. The blog cites the July 2020 Garmin ransomware attack, in which the GPS and wearables maker paid an undisclosed ransom to restore operations, and notes that outdated systems such as Windows XP and Windows 7 are not uncommon in ICS environments.
Why it matters: Dragos notes that for some companies, operational downtime can cost thousands and sometimes millions of dollars a day, which is exactly the pressure that makes paying a ransom attractive when backups are not maintained.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026