GE Vernova's Grid Solutions business and Dragos announced a technology partnership on February 26th, 2024, in Paris to offer combined grid automation and OT cybersecurity solutions to GE Vernova's global grid automation customers. The agreement covers...
The U.S. Securities and Exchange Commission adopted a Cyber Disclosure Rule requiring public companies to disclose material cybersecurity incidents in a timely and comprehensive manner and to make other cyber-related disclosures in annual filings; the rule...
Dragos launched "The Hunt," a blog series on threat hunting in operational technology environments, drawing on SANS Institute's definition of threat hunting as a proactive, data-driven, iterative search that goes beyond standard detection. The series...
Dragos announced on March 25, 2024 that CRN, a brand of The Channel Company, gave its Global Partner Program a 5-Star Award in the 2024 Partner Program Guide, which evaluates vendors on partner training, pre- and post-sales support, marketing resources,...
Dragos announced a new integration between its OT Cybersecurity Platform and Swimlane Turbine, an AI-enabled low-code security automation platform, that centralizes IT and OT threat detection, remediation, and case management into a single system of...
Dragos's OT Cyber Threat Intelligence team has tracked VOLTZITE, a threat group targeting ICS environments across critical infrastructure, since early 2023, and notes its overlap with Volt Typhoon, which CISA flagged in advisories in May 2023 and February...
Dragos OT Cyber Threat Intelligence published a Water & Wastewater Threat Perspective stating that water systems are increasingly targeted by cyber adversaries, with risks to public health and safety and to the industrial control systems in OT...
Dragos reported that industrial ransomware incidents fell from 204 in Q4 2023 to 169 in Q1 2024, and active groups targeting industrial organizations dropped from 32 to 22 of the 77 known groups. The quarter saw Lockbit dismantled by an international law...
Dragos and the SANS Institute describe OT cybersecurity as the practice of protecting the industrial assets and processes that run on OT networks, the systems that control and monitor physical devices in sectors such as manufacturing, energy, water, and...
Dragos reports that in November 2023 the CyberAv3ngers hacktivist group compromised PLCs at water utilities across North America, Europe, and Australia, the first successful cyber attacks on water systems by hacktivists, disrupting water services for two...
Dragos announced on May 7, 2024 an expanded partnership with CrowdStrike to integrate OT threat intelligence from the Dragos Platform into CrowdStrike Falcon Next-Gen SIEM, giving SOC analysts OT network visibility and context to cut false positives and...
Creative Energy, a North American district energy company, adopted Dragos's OT-native cybersecurity technology - the Dragos Platform, OT Watch, and Neighborhood Keeper - to protect its district energy systems against cyber threats. The partnership gave...
Dragos reports that data centre cooling systems, managed through building automation and building management systems, are plausible targets for adversaries seeking to disrupt operations, citing a July 2021 leak of Iranian government-associated classified...
Boston Beer Company implemented the Dragos Platform and the OT Watch threat hunting service across its four US breweries to secure its manufacturing environments. The company reported 100% ROI in the first year and a modernized infrastructure. What's...
Dragos outlines how to operationalize cyber threat intelligence for OT and ICS environments, describing CTI as data that becomes usable information when refined, drawn from four primary data sources and judged by the CART standard: complete, accurate,...
Dragos announced on May 20, 2024, partnerships with insurance providers, brokers, and legal firms, naming AEGIS, McGriff, and Pillsbury among its preferred partner brands, and said the Dragos Platform has been appointed to the NetDiligence Cyber Risk...
Dragos' 2023 OT threat review describes ELECTRUM running destructive wiper attacks on Ukrainian critical infrastructure, including a January 2023 attack on telecom Kyivstar, and the emergence of three new threat groups: GANANITE, VOLTZITE, and LAURIONITE....
Dragos and the SANS Institute published the second entry in their OT Cybersecurity Fundamentals blog series, describing OT network architecture through the Purdue Model, which divides industrial environments into five levels from Level 0 to Level 4, with...
Dragos's 2021 Year In Review found that 70% of ICS environments have external connections from OEMs, IT networks, or the internet to the OT network, more than double the 2020 figure. The same report states that 77% of Dragos service engagements showed...
Dragos OT Watch reports that 100% of its customers had at least one significant misconfiguration in their OT environments, found through an initial "Low Hanging Fruit Threat Hunt" run at onboarding. Examples include hosts with DNS pointed at external...
Dragos WorldView reports that hacktivist groups motivated by geopolitical conflict have escalated from website defacements and denial-of-service attacks to targeting operational technology, with CyberAv3ngers compromising a Unitronics PLC at the Municipal...
Forrester published its second Wave report on operational technology security solutions, The Forrester Wave: Operational Technology Security Solutions, Q2 2024, nearly three years after its first, and Dragos - which participated - was named a Strong...
Dragos describes Zero Trust as a shift from network-based security to an application- and data-centric model built on strong authentication, limited authorization, data protection, and session monitoring. The post states that OT environments run on an...
FERC issued Order 907 on June 26, 2025, approving NERC CIP-015-1, which requires Internal Network Security Monitoring for traffic inside Electronic Security Perimeters across the North American electric sector, and directed NERC to modify the standard...
The SANS ICS 5 Critical Controls for ICS cybersecurity were developed by Robert M. Lee, SANS instructor and Dragos CEO and co-founder, and Tim Conway, SANS instructor, drawing on analysis of compromises and cyber attacks on industrial companies worldwide....
A Dragos OT Watch threat hunter describes hunting for human-driven behaviors in OT networks, including a case where a single host showed a 90-day anomalous spike in traffic to ad hoc file-sharing sites such as Pastebin, JustPasteIt, MediaFire and...
Dragos and the SANS Institute published the fourth blog in a series on xOT cybersecurity fundamentals, defining xOT cyber threat intelligence as the collection, processing, analysis, dissemination, and integration of information about active or emerging...
The US Transportation Security Administration released an updated Pipeline Security Directive on Enhancing Pipeline Cybersecurity, designated Security Directive Pipeline-2021-01D, which supersedes the prior version, Pipeline-2021-01C. The directive...
Forrester's Operational Technology Security Solutions Wave, Q2 2024, named Dragos a Strong Performer and the only participant with perfect 5 scores in Threat and Anomaly Detection, Vulnerability Management, and Product Security, plus perfect scores in...
Dragos published a Nordic Countries Threat Perspective report in its WorldView threat intelligence service, covering ICS and OT cyber threats across Denmark, Finland, Iceland, Norway, Sweden, the Faroe Islands, Greenland, and Åland. The report notes a...