Dragos reports that digitalization in manufacturing has blurred the line between IT and OT, giving adversaries a path from enterprise systems into operational technology. Its threat intelligence highlights CHERNOVITE's PIPEDREAM ICS malware framework,...
The SANS Institute and Dragos published the SANS ICS 5 Critical Controls, a framework led by SANS authors Tim Conway and Robert M. Lee, built from an analysis of all known ICS cyber attacks. The five controls are designed for prevention, detection, and...
Dragos discovered FrostyGoop, the ninth known ICS malware, in April 2024; it is written in Golang, compiled for Windows, and talks directly to industrial control systems over Modbus TCP port 502, and most antivirus vendors do not detect it as malicious....
In 2023, FERC directed NERC to develop Critical Infrastructure Protection requirements for Internal Network Security Monitoring covering all high impact Bulk Electric System Cyber Systems and medium impact systems with External Routable Connectivity,...
Dragos announced on August 1, 2024 that its Platform supports the upcoming NERC CIP-015 requirements for Internal Network Security Monitoring, which mandate monitoring of east-west network traffic within CIP-networked environments for High and Medium...
Dragos reports that ransomware incidents against industrial organizations almost doubled from Q1 to Q2 2024, with 29 of the 86 known industrial-targeting ransomware groups active in the second quarter versus 22 in the first. LockBit accounted for roughly...
Dragos released an update to its OT security platform on August 28, 2024, adding local collector and file ingestion for broader data collection, new asset inventory filtering, and tighter integration with its WorldView and Neighborhood Keeper threat...
Dragos and CrowdStrike describe integrating the Dragos Platform into CrowdStrike Falcon Next-Gen SIEM to bring OT/IoT asset visibility, detections, and vulnerabilities into an IT-focused SOC. The post cites a 50 percent increase in ransomware attacks...
Dragos published a buyer's guide for ICS network visibility and monitoring software, framed as a checklist to help organizations prioritize capabilities and allocate cybersecurity budget. The guide's stated criteria include vendor support, advanced threat...
Dragos published a vendor evaluation checklist aimed at organizations selecting an operational technology cybersecurity partner, framed around what to look for in an OT security vendor. The post cites the company's decade of OT-specific telemetry,...
Dragos describes its customer onboarding and support model for its OT security platform, which combines a proof of concept, demo meetings, initial environment reports, and cybersecurity training with a dedicated technical account manager. The company says...
Dragos will hold its eighth annual Dragos Industrial Security Conference (DISC) on Thursday, November 7, in Hanover, Maryland, a free full-day event for industrial asset owners and operators covering ICS and OT security. The conference will present...
Dragos identified malicious activity targeting multiple critical North American infrastructure networks, mainly in electric, oil and gas, water and wastewater, and manufacturing, focused on initial access to Cisco SSL VPN, Fortinet VPN, and Palo Alto...
Dragos announced on October 1, 2024 that it acquired Network Perception, maker of the NP-View network visualization platform for OT networks, to add network visibility, compliance, and segmentation analysis to the Dragos Platform. NP-View works offline by...
Dragos acquired Network Perception, maker of NP-View, a network visualization platform that analyzes firewall policy, router and switch access paths, and network segmentation to find unintended access paths into and through OT environments. Network...
Dragos announced on October 9, 2024 the creation of Dragos Public Sector LLC, a subsidiary delivering OT cybersecurity to government including US federal agencies, and said its public sector business has grown at a 67% CAGR since 2020. DISA also released...
A Dragos incident responder with six years working exclusively on industrial networks describes responding to ransomware at Fortune 500 factories, intrusions and insider threat cases at small municipal utilities with a single IT resource, and forensics on...
Dragos defines xOT asset visibility as comprehensive, real-time awareness of every device, system, and component in an operational technology network, including ICS, IT, IoT, and IIoT assets, achieved through network monitoring tools. The company cites a...
Dragos released a Knowledge Pack Plus update for its Platform containing 688 detections, 3,700 advisories, and 9,900 vulnerabilities affecting more than 23,000 industrial systems from vendors including Siemens, Bosch, Rockwell Automation, SEL, and Phoenix...
Dragos argues that risk-based vulnerability management has become a cornerstone of OT cybersecurity as industrial systems grow more connected, prioritizing vulnerabilities by impact and likelihood of exploitation rather than by score alone. The post cites...
Dragos announced on November 19, 2024 that it appointed Mark Matheos as CFO, Mark Packham as CMO, and moved former CFO Darren Sankbeil into a new Chief Strategy Officer role. The company said the appointments are meant to support its next stage of growth...
Dragos and Fortinet have partnered on an OT cybersecurity solution that the companies say enhances visibility, improves cyber event correlation, and enforces policies with actionable responses. The partnership is aimed at helping customers make more...
Dragos held its fourth annual Capture the Flag event, a 48-hour ICS/OT competition built around a fictional threat group called Biffs-Budds and the MITRE ATT&CK for ICS Kill Chain, drawing 819 teams and 1,249 participants from 74 countries and 822 cities....
Dragos launched an "Ask Dragos Intel" blog series in which its threat and vulnerability researchers, who focus solely on OT cyber threats, answer questions submitted by OT defenders in the field. The company says the series will cover topics such as...
Dragos and Carahsoft announced a strategic partnership on December 3, 2024, under which Carahsoft will serve as Dragos' Master Government Aggregator, making the Dragos Platform and its WorldView OT threat intelligence available to the public sector through...
Dragos argues that traditional IT vulnerability management, which relies heavily on CVSS scores and frequent patching, does not translate well to OT environments in electric utilities, manufacturing, and oil and gas, where continuous uptime and safety are...
Dragos says organizations commonly rely on IT-centric cyber threat intelligence that misses the context needed to secure OT environments, which run unique protocols, have longer device lifecycles, and prioritize uptime and safety over data theft or...
Dragos reports that over the past quarter, several OT environments suffered widespread compromises tied to vulnerable or end-of-life firewall products from a single vendor, with OT patching sometimes delayed for months or years. The firm argues that...
Dragos OT-CERT published a blog in its series on OT cybersecurity best practices for under-resourced organizations, covering Identity and Access Management and its four pillars: Identity Lifecycle Management, Access Control, Authentication and...
Dragos reports that Q3 2024 brought new ransomware groups, rebranding of existing entities, and expanded initial access broker operations, while LockBit's disruption under Operation Cronos pushed affiliates such as Velvet Tempest toward RansomHub. Dragos...