Dragos describes risk-based vulnerability management for OT as an alternative to patch-all strategies, which it says are impractical and potentially dangerous because downtime in OT environments can cost millions or jeopardize human safety. The post...
Dragos describes its WorldView Request for Intelligence service, which lets WorldView subscribers submit a support request through the subscription portal when the Dragos Platform flags suspicious activity in their OT environment. In the illustrated...
Dragos WorldView's Global Oil and Gas Threat Perspective report lays out five attack scenarios facing the oil and natural gas sector, drawn from adversary hunters' research on tactics, techniques, and procedures. The report notes a 15 percent increase in...
Dragos Inc. and the Singapore Armed Forces' Digital and Intelligence Service signed a three-year Memorandum of Understanding on January 6, 2025, to jointly develop advanced cybersecurity capabilities, collaborate on strategic planning and training, and...
Dragos announced a global partnership with Yokogawa Electric Corporation on January 16, 2025, pairing the Dragos OT Cybersecurity Platform with Yokogawa's CENTUM VP distributed control system. The companies say joint customers get OT-native network...
This third Dragos blog in a series on the ISA/IEC 62443 standards explains key concepts for assessing alignment with the industrial cybersecurity framework, which aims to improve the reliability, integrity, and security of Industrial Automation and Control...
Dragos CEO and co-founder Robert M. Lee is returning as a speaker at the World Economic Forum Annual Meeting in Davos for the session "Cutting through Cyber Complexity," scheduled for Wednesday 22 January, 11:30-12:15 CEST at Aspen 3, Kurpark Village. The...
Dragos is previewing its 2025 OT Cybersecurity Year in Review, a report built on more than a decade of OT-specific telemetry, adversary research, and incident data. Its prior edition reported a 49.5% rise in ransomware incidents in 2023, with manufacturing...
Dragos summarizes SANS Institute guidance on securing cyber-physical systems, which it defines as OT, IT, IoT, and IIoT devices combined in industrial environments where digital technologies directly affect physical operations. The controls it lists are...
Dragos CEO and co-founder Robert M. Lee returned as a speaker at the 2025 World Economic Forum Annual Meeting in Davos, joining government and industry leaders in a session titled "Cutting through Cyber Complexity" on industrial and critical infrastructure...
NIST published Special Publication 800-82 Revision 3, titled "Guide to Operational Technology (OT) Security," a framework for securing industrial control systems and other OT environments across sectors. The guide outlines 19 control families and addresses...
Dragos's Q4 2024 analysis found ransomware groups refining techniques, forming new alliances, and exploiting newly disclosed vulnerabilities in Veeam Backup & Replication and Cleo Managed File Transfer to gain initial access to industrial organizations....
Dragos describes OT environments in electric, oil and gas, and manufacturing as increasingly exposed to malware, ransomware, and nation-state attacks, with adversaries continuously evolving their tactics. The blog argues that OT networks of PLCs, SCADA...
Dragos announced on February 18, 2025 that it was named a Leader in the first Gartner Magic Quadrant for CPS Protection Platforms, an evaluation of 17 vendors against 15 criteria on Ability to Execute and Completeness of Vision. Gartner expects that by...
Dragos released its 8th Annual Year in Review on February 25, 2025, reporting ransomware activity against industrial organizations up more than 87% over the prior year and naming two new OT threat groups, GRAPHITE and BAUXITE. Dragos now tracks 23 threat...
Dragos released its 8th Annual OT Cybersecurity Year in Review, reporting that it tracks 23 threat groups targeting industrial organizations, nine of which were active in the period, with two new groups detailed. The report states Dragos documented 1,693...
The Australian Energy Market Operator (AEMO) developed the Australian Energy Sector Cyber Security Framework (AESCSF) with industry and government stakeholders as a sector-specific guideline for managing cybersecurity risk in energy companies, structured...
Dragos is running a series of complimentary two-day Dragos Forum events for industrial asset owners and operators, offering hands-on, interactive sessions led by Dragos specialists and experienced asset owners. The company positions the Forum as distinct...
Dragos announced on March 25, 2025 that its Community Defense Program is now available in Canada, giving perpetually free access to the Dragos Platform and Neighborhood Keeper to Canadian water, electric, and gas providers with under roughly $140M CAN in...
Australia's Security of Critical Infrastructure (SOCI) Act 2018 applies to organizations that own or operate critical infrastructure assets and has been amended to expand its scope and address evolving threats. Assets designated Systems of National...
Dragos identified 708 ransomware incidents impacting industrial entities worldwide in Q1 2025, up from roughly 600 in Q4 2024, with North America rising from 360 to 413 incidents and Europe from 102 to 135. Manufacturing remained the most affected sector...
A former Rockwell Automation CISO recounts building a playbook in January 2020, after a US drone strike killed Iranian Major General Qassem Soleimani, Iranian leaders vowed revenge, DHS warned of potential cyber attacks, and CISA issued alerts urging US...
Dragos announced on June 24, 2025 that Casey Herman, former Senior Audit Partner for energy and utilities at PwC, and Deborah C. Hopkins, former founder and CEO of Citi Ventures and CFO at Boeing and Lucent Technologies, joined its Board of Directors. CEO...
On June 26, 2025, FERC issued Order No. 907 approving NERC CIP-015-1, which requires Internal Network Security Monitoring of east-west traffic inside Electronic Security Perimeters for High and Medium Impact Bulk Electric System Cyber Systems with External...
Dragos, founded in 2016, describes itself as an extended operational technology (xOT) cybersecurity company whose platform, threat intelligence, and expert services help organizations in electric, oil and gas, manufacturing, water, and data centers find...
Jackson Evans-Davies is a Director, Consulting, at Dragos, where he focuses on penetration testing, red teaming, and architecture and vulnerability assessment services across industrial environments. Before Dragos, he spent 10 years as an industrial cyber...
Dragos describes its Platform as a passive-first OT visibility tool that observes network traffic without intrusive scanning, supports 600+ industrial protocols, and can extend coverage through an Active Collector and agentless active device discovery. The...
Dragos describes its platform as a living knowledge engine built from more than a decade of OT-specific telemetry, adversary research, and frontline expertise. The company says the platform covers the full operational technology environment, defined as...
Dragos describes xOT as covering the full operational technology environment, meaning every system that influences a physical process, and says the SANS ICS 5 Critical Controls framework covers OT-specific incident response, defensible architecture, ICS...
Dragos describes a petroleum-sector OT security offering built on more than a decade of OT-specific telemetry, adversary research, and incident data, covering the value chain from wellheads to refineries. The text names SCADA systems controlling pipelines,...