Cyber Risks · Dragos Blog

The State of Threats to Electric Entities in North America

Summary: Dragos released The North American Electric Cyber Threat Perspective, based on its ICS-specific threat intelligence, global platform telemetry, and service engagements. The report states that two groups, MAGNALLIUM and XENOTIME, expanded their targeting from oil and gas to include electric in North America, and that PARISITE, an activity group Dragos identified in 2019, largely focuses on exploiting VPN appliance vulnerabilities to gain initial access to ICS networks.

What you should know: Two adversaries already active against oil and gas have widened their scope to North American electric, and a third group's route in is the VPN appliance that vendors and contractors use to connect to your ICS networks.

Read the original at Dragos Blog ↗

Topics
OT / ICS & Critical Infrastructure
Related
Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026