Dragos announced on March 9, 2026 that it was named a Leader in the 2026 Gartner Magic Quadrant for CPS Protection Platforms for the second consecutive year, recognized on Ability to Execute and Completeness of Vision. The company cited its 2026 OT/ICS...
Dragos recorded 1,211 ransomware incidents affecting industrial entities worldwide in Q4 2025, up from 742 in Q3 and 657 in Q2, with Qilin the most active group for a third consecutive quarter at 284 incidents. Manufacturing accounted for nearly 70% of Q4...
Dragos announced the Dragos Intelligence Fabric, a knowledge base built from over a decade of OT-specific telemetry, adversary research, vulnerability analysis, incident response, and 24/7 managed services, which it describes as the largest collection of...
Dragos reports that in 2025 it tracked 119 ransomware groups impacting more than 3,300 industrial organizations worldwide, nearly double the number in 2024, alongside newly identified threat groups AZURITE, PYROXENE, and SYLVANITE. The report also...
Dragos announced on April 1, 2026 the appointment of Kaori Nieda as its first Country Manager in Japan, building on its existing partnership with Macnica. Nieda, a cybersecurity veteran of more than 20 years in threat intelligence, XDR, network security,...
Dragos describes OT Watch, a threat-hunting-as-a-service offering that customers can add to any Dragos Platform deployment, as a proactive manual search for malicious activity, suspicious behavior, or vulnerabilities in OT networks. The post argues that an...
This source is a Dragos staff biography for Bobbie Crinella, an Associate Industrial Consultant on the Professional Services team who works with customers on security posture, resilience, and compliance. It lists her credentials, including a Master of...
Dragos's 2026 OT/ICS Year in Review reports that ELECTRUM, the group behind the 2015 and 2016 Ukrainian power outages, expanded its targeting to Polish energy infrastructure in late December 2025 in what Dragos calls the first major coordinated attack...
The U.S. Coast Guard will increase Port State Control inspections focused on signs of poor cybersecurity practices, especially those affecting International Safety Management Code compliance on foreign-flagged vessels, with outcomes that could include...
A Dragos blog post argues that the common OT security question - whether there are enough incidents to justify detection investment - is the wrong frame, because fewer than one in ten OT networks worldwide has network monitoring in place, so known...
Dragos released Platform 3.1, a Long-Term Support version that adds AI capabilities including an Analyst Assistant for natural-language queries and a Model Context Protocol server on Cloud and On-Prem SiteStores. The release also adds automatic asset...
Dragos elevated VOLTZITE to a Stage 2 threat group after it compromised cellular gateways across U.S. midstream oil and gas operations in 2025, then pivoted to engineering workstations to dump configuration files and alarm data. A newly designated Stage 2...
Dragos analysis across 2025 found that just 3 percent of vulnerabilities required immediate action, 71 percent were better handled through planned mitigation, and 27 percent offered limited practical risk reduction even if remediated. The same data showed...
Dragos describes how its Platform's detections can support NERC CIP compliance, including identifying unauthorized Transient Cyber Assets through new IP addresses, new MAC addresses, RDP connections over non-standard ports, port scanning, and attempted...
On April 16, Darktrace released an analysis of ZionSiphon, malware intended to disrupt Israeli dam desalination plants, and the subsequent reporting overstated its ability to disrupt ICS environments. Dragos, which analyzed the sample in March, assesses...
Dragos reports that manufacturing accounted for more than two-thirds of all ransomware victims among industrial organizations in 2025, with 119 ransomware groups tracked targeting industrial organizations, a roughly 49 percent increase from 2024,...
Dragos describes AI for xOT security as generative AI applied to a customer's environmental data against a proprietary xOT knowledge base, letting analysts query their environment in plain English and get answers grounded in real asset and threat data...
Dragos, assisting Gambit Security's investigation of a December 2025 to February 2026 campaign against multiple Mexican government organizations, found that an unknown adversary used Anthropic's Claude and OpenAI's GPT to target a municipal water and...
Dragos reports that in 2025, 30 percent of its incident response cases began with unexplained operational issues, ahead of malware and ransomware at 23 percent each, and most incidents caused at least a one-week outage. Across its services work, poor IT/OT...
Dragos describes its OT threat intelligence offering as a living knowledge engine built from more than a decade of OT-specific telemetry, adversary research, and frontline expertise. The company says the engine underpins the Dragos Platform and defines the...
Dragos announced on March 4, 2026 a public-private partnership with the UAE Cyber Security Council to establish an OT Cybersecurity Centre of Excellence in the UAE under the "Make it in Emirates" Forum. The centre will give practitioners an operational...
Dragos announced on June 1, 2026 that it has acquired Phosphorus, extending the Dragos Platform to protect the billions of connected devices embedded across critical infrastructure and operational networks. Dragos describes the combined scope as the...
Dragos announced Extended Operational Technology, or xOT, defined as every system, regardless of classification, ownership, or protocol, that can influence a control loop or physical process. The company argues that device-type categories miss context,...
Dragos identified 1,020 ransomware incidents impacting industrial organizations worldwide in Q1 2026, consistent with the elevated baseline seen in late 2025, with manufacturing accounting for 62% of observed industrial victims and North America reporting...
Dragos has joined Anthropic's Project Glasswing, applying Claude Mythos Preview to search its own products for novel vulnerabilities. Dragos says most AI-assisted vulnerability discovery has been built and tested against IT systems, while its platform...
Dragos describes xOT, or extended operational technology, as the full set of systems that influence a physical process, whether they are classified as OT, IT, or connected devices, and defines a device as xOT by what it does rather than what it is. The...
Accenture agreed to acquire a majority stake in Dragos and all of runZero and NetRise at a combined enterprise value of approximately $4.175 billion, with closing expected in August or September 2026 pending regulatory approval. Dragos, which will operate...
Accenture is acquiring a majority stake in Dragos at a $3.2B valuation, and all of runZero and NetRise, bringing the combined business value to $4.175B. Dragos CEO Robert M. Lee says he remains CEO, employees keep their equity and roles, and the deal's...
Dragos announced Dragos EmberAI on June 23, 2026, an OT-native AI built on its Dragos Intelligence Fabric, which the company describes as drawing on over five petabytes of daily OT telemetry, 10-plus years of adversary tracking, OT vulnerability research...
Dragos announced EmberAI, described as the living knowledge engine behind the Dragos Platform, built from over a decade of OT-specific telemetry, adversary research, and frontline expertise. The company frames it around its Assess, Plan, and Respond model...