Dragos ran runtime testing of MOUSELAB, an automated version of PIPEDREAM's OPC UA module MOUSEHOLE, against a mock water pipeline on its cyber range, closing a solenoid valve, raising flow to 100%, and lifting the high-pressure set point from 15 PSI to...
Dragos announced on October 31, 2023 that Rockwell Automation will make the Dragos Platform available to organizations for ICS/OT threat detection, along with global deployment services and support. The expansion builds on a prior global agreement between...
The UK's National Cyber Security Centre developed the Cyber Assessment Framework (CAF) to define top-level cybersecurity outcomes for organisations performing essential functions, applying to UK Critical National Infrastructure, Operators of Essential...
Dragos was named to Deloitte's Technology Fast 500 for the third consecutive year, with revenue growth of more than 535% between 2019 and 2022. The company also cited a $74 million Series D extension in September 2023 that brought the round to $274 million...
Dragos Inc. and Aramco signed a memorandum of understanding on November 14, 2023 in Riyadh to review potential opportunities for protecting critical industrial assets and infrastructure for Aramco, its affiliates, and the Kingdom of Saudi Arabia. The MOU...
Dragos held its third annual DISC Capture the Flag contest on November 5, 2023, with 1,507 registered players across 866 teams working through 47 ICS/OT challenges built on a full MITRE ATT&CK for ICS kill chain. Hungary's ukatemi won for the second year...
Dragos reported 231 ransomware incidents against industrial organizations in Q3 2023, down from 253 in Q2, with only 30 of the 72 groups that have historically attacked industrial organizations active in the quarter. Manufacturing accounted for 158...
Dragos cites studies finding that only 21 percent of industrial organizations have reached OT cybersecurity maturity, with the IT-OT gap as a major impediment, and that detecting, investigating, and remediating ICS/OT incidents averages around 316 days and...
Dragos OT-CERT published a monthly best-practices blog on system hardening for operational technology environments, aimed at small and medium businesses and under-resourced organizations that lack in-house security expertise. The post recommends testing...
Dragos published a blog summarizing Lundin Mining's use of its OT Cybersecurity Platform and OT Watch service, describing the mining company as an example of cyber resilience in a critical infrastructure sector. The post says Lundin uses the Dragos...
Dragos announced the Community Defense Program on December 6, 2023, offering free OT cybersecurity software, including the Dragos Platform and Neighborhood Keeper, to small water, electric, and natural gas providers in the United States with under $100M in...
Dragos expanded its Community Defense Program, launched as a pilot in 2022, to give more small US water, gas, and electric utilities free Dragos Platform software and enrollment in its Neighborhood Keeper collective defense capability for as long as they...
Dragos Threat Intelligence tracked the Cyber Av3ngers hacktivist group, first observed in early September 2023 claiming a disruption of Israel Railway's network that Dragos assessed as false, followed by October 2023 claims against an Israeli power grid...
Dragos attributes a disruptive attack on a Ukrainian electric substation, running from June 2022 to events on October 10 and 12, 2022, to the ELECTRUM threat group, which has technical overlaps with SANDWORM. ELECTRUM gained access to a hypervisor running...
The International Maritime Organization defines maritime cyber risk as the potential threat to technology assets that could lead to operational, safety, or security failures from the corruption, loss, or compromise of information or systems. Many maritime...
Dragos announced its 2023 OT Cybersecurity Year in Review, a report it describes as turning last year's OT cybersecurity developments into lessons and strategies for 2024. Its recap of the prior year's report cites PIPEDREAM as the seventh known...
A Dragos blog post, written with former Dragos intelligence technical account manager Michael Gardner, lays out a method for OT threat hunting that starts with an intelligence-driven hypothesis - its example being adversaries exploiting Cisco routers via...
Dragos describes a tradeoff for industrial companies: connecting more systems and sharing data across the enterprise to gain efficiency also enlarges the attack surface and can raise the frequency of incidents. The company says its OT technology is built...
Dragos announced on January 23, 2023 that it became the first AWS Partner to achieve the AWS Manufacturing and Industrial Competency in the Operational Technology Security category. The designation recognizes Dragos for software and professional services...
Dragos has achieved the AWS Manufacturing and Industrial Competency, becoming the first Partner with a Competency designation in the Operational Technology Security category. The Dragos Platform runs on AWS as a managed SaaS deployment with network...
Dragos reported that in Q4 2023 only 32 of the 77 ransomware groups that have historically attacked industrial organizations were active, and incidents fell from 231 to 204 over the same period, though the cause of the decline is unknown. LockBit 3.0...
Dragos OT-CERT published best-practice guidance for small and medium businesses on two longstanding ICS/OT weaknesses: devices exposed to the internet and default passwords. The blog cites the CyberAv3ngers attacks on Unitronics devices as a reminder that...
Dragos announced on January 31, 2024 that Bill Fehrman, President and CEO of Centuri Group, and Ekta Singh-Bushell, formerly COO in the Executive Office at the Federal Reserve Bank of New York and Global Information Security Officer at EY, joined its Board...
Dragos OT-CERT's monthly SMB guidance notes that during assessments consultants often find no company-approved file transfer policy, with USB drives used as common practice and little regard for a drive's ownership history, contents, or last virus scan....
Dragos CEO and founder Robert M. Lee has been invited to testify before the U.S. Congressional Subcommittee on Cybersecurity and Infrastructure Protection on February 6, 2024, at a hearing titled "Securing Operational Technology: A Deep Dive into the Water...
Dragos testified before the U.S. House Subcommittee on Cybersecurity and Infrastructure Protection about operational technology in the nation's water systems. The testimony described water utilities defending against both state actors and criminal groups...
Dragos announced on February 7, 2024 that it appointed Rick Kramer as Chief Revenue Officer and Angela Crossman as its first Chief People Officer. Kramer previously held leadership roles at Cisco, Kenna Security, and Symantec, while Crossman served as...
Dragos released its seventh annual OT Cybersecurity Year in Review on February 20, 2024, naming three new threat groups including VOLTZITE, which is linked to Volt Typhoon, and reporting a nearly 50% increase in ransomware incidents among industrial...
Dragos released its 7th annual OT Cybersecurity Year in Review, reporting that 50 ransomware groups were responsible for 905 incidents impacting industrial organizations in 2023, a 49.5 percent increase from 2022, with manufacturing the most affected...
Dragos tracks an active threat group it calls VOLTZITE, which overlaps with Volt Typhoon and the adversary in CISA advisories from May 2023 and February 2024, and has conducted reconnaissance and enumeration against multiple US-based electric companies...