Dragos published a blog post framing OT cybersecurity as a top priority from boardrooms to manufacturing floors, and noting that CISOs must navigate communication challenges and cultural gaps with IT teams. The post offers five critical controls to...
Public disclosures indicate an advanced adversary obtained elements of F5 BIG-IP source code, information about vulnerabilities, and a limited set of customer implementation details. Dragos notes that BIG-IP systems can broker access to operational...
Dragos describes a layered OT asset-discovery approach that pairs passive network monitoring with controlled, read-only active collection, including a software agent deployed on Windows-based OT devices to query assets that passive sensors cannot observe....
The NIS2 Directive is EU-wide cybersecurity legislation that member states had to transpose into national law by October 17, 2024, with compliance required from October 18, 2024, covering Essential Entities such as energy, transportation, banking,...
Dragos held its fifth annual Capture the Flag event, drawing nearly 2,000 registered players on more than 1,200 teams from 90 countries and 1,115 cities, with participants working across 5,000-plus public IP addresses. Over the 48-hour competition, only...
TSA Security Directive Pipeline-2021-02F, effective May 3, 2025, requires owners and operators of TSA-designated critical pipeline systems notified before July 26, 2022, to implement cybersecurity measures protecting critical cyber systems from malicious...
Australia's Security of Critical Infrastructure Act 2018 covers 11 sectors including energy, water, transport, healthcare, finance, and defense, and its 2024 amendments expanded scope to data storage systems holding business-critical data, broadened...
The 2025 SANS State of ICS/OT Cybersecurity Survey, drawing on responses from over 330 industrial cybersecurity professionals worldwide, found that nearly 50% of incidents in 2025 were detected within 24 hours and 60% were contained within 48 hours of...
Dragos identified 742 ransomware incidents affecting industrial entities worldwide in Q3 2025 (July-September), up from 708 in Q1 and 657 in Q2, with North America the most targeted region and manufacturing accounting for 72% of incidents. Qilin was the...
The UK's National Cyber Security Centre has released CAF 4.0, a Cyber Assessment Framework that the source says moves beyond compliance to demand proactive, intelligence-driven defense, requiring organizations to understand adversaries, anticipate attacks,...
Dragos evaluated Nuvation Energy's Battery Management System and Multi-Stack Controller devices and found vulnerabilities in the BMS through the latest software release, Descartes, plus flaws in the MSC that are fixed in nPlatform 2.5.1. One vulnerability...
On 23 December 2015, adversaries remotely accessed SCADA dispatch systems and manually opened circuit breakers at 30 substations, cutting power to 225,000 people in western Ukraine after about six months of studying operators and network architecture. The...
Dragos CEO Robert M. Lee is returning as a speaker at the World Economic Forum Annual Meeting in Davos, appearing in the main-programming session "On Guard, from Deep Sea to Orbit" on Wednesday, January 21, 13:15-14:00 CEST at the Congress Centre. The...
Singapore's CCoP for Critical Information Infrastructure, last updated December 2022, sets out detailed guidelines for protecting critical infrastructure including operational technology, and applies to Critical Information Infrastructure Owners across...
Saudi Arabia's NCA regulation OTCC-1:2022 sets OT cybersecurity controls for critical infrastructure in oil and gas, refineries, manufacturing, power, water, and other essential sectors, building on the earlier NCA ECC-1:2018 requirements. The regulation...
Kristine Martz is identified as Principal Product Advisor for Dragos Inc., with over fifteen years of experience in power and utilities cybersecurity and regulatory compliance, including expertise in NERC standards and real-time systems security. The...
FERC proposed in June 2025 to approve NERC CIP-015-1 while directing NERC to extend internal network security monitoring to electronic access control or monitoring systems (EACMS) and physical access control systems (PACS) outside the Electronic Security...
Dragos announced it was ranked #1 in innovation, citing a platform built on more than a decade of OT-specific telemetry, adversary research, and frontline incident expertise. The company describes the Dragos Platform as combining OT threat intelligence,...
Frost & Sullivan's 2025 Frost Radar for OT Cybersecurity Solutions sizes the market at $4.37 billion in 2024 and projects it nearly doubling by 2030, and it ranks the Dragos Platform #1 in Innovation on its Innovation Index. Frost & Sullivan cited Dragos's...
Dragos announced on January 28, 2026 that Dawn Mitchell will join as Chief People Officer, leading its People organization as the company scales to meet global demand for OT cybersecurity. Mitchell brings more than 15 years of people strategy experience,...
On December 29, 2025, a cyber attack targeted operational technology at multiple sites across Poland's electrical grid, including wind farms, solar installations, and combined heat and power facilities, and Prime Minister Donald Tusk briefed government...
Dragos announced on February 3, 2026 an expanded collaboration with Microsoft to deploy the Dragos Platform on Microsoft Azure, integrate it with Microsoft Sentinel, and make it available through Microsoft Marketplace. The companies said the arrangement...
A Dragos executive, speaking after the World Economic Forum's Annual Meeting in Davos, described early deployments of AI controllers and agentic AI making autonomous decisions in battery farms, solar farms, wind farms, and mining, with adoption outpacing...
Dragos reports that adversaries have moved beyond prepositioning in OT environments to actively mapping control loops and learning how to manipulate physical processes. Three new threat groups emerged and established groups expanded globally, with...
Dragos released its 9th Annual OT Cybersecurity Year in Review, reporting that adversaries are moving beyond pre-positioning to actively mapping control loops and learning to manipulate physical processes. The report introduces three new threat groups...
Dragos released its 9th annual OT/ICS Cybersecurity Report on February 17, 2026, identifying three new threat groups and finding adversaries progressing from reconnaissance to operational disruption. Ransomware groups targeting industrial organizations...
NERC's proposed CIP-015-2 standard, which has passed only an initial industry ballot and may still be refined, would extend Internal Network Security Monitoring beyond the Electronic Security Perimeter to cover EACMS, PACS, and Shared Cyber Infrastructure....
Axio and Dragos announced a partnership on February 10th, 2026 in New York in which Axio's Cyber Risk Quantification models will integrate Dragos threat intelligence and risk reduction metrics from the Dragos Platform. The combination is aimed at...
Dragos announced it has been named a Leader in the Gartner Magic Quadrant, citing a platform built on more than a decade of OT-specific telemetry, adversary research, and frontline expertise. The Dragos Platform covers asset inventory, OT network...
Dragos was named a Leader in the 2026 Gartner Magic Quadrant for CPS Protection Platforms, its second consecutive Leader placement, with Gartner citing balanced progress across Ability to Execute and Completeness of Vision criteria. The report noted...