Dragos acquired NetRise and runZero, coinciding with the close of Accenture's majority investment in Dragos, and CEO Robert M. Lee was elevated to chairman of the board in addition to CEO. runZero, led by HD Moore, brings exposure management across IT,...
Dragos argues that most organizations still lack real OT visibility, holding only stale asset lists and spreadsheets rather than detail on firmware versions, patch levels, credentials, and configuration changes. The company is extending its platform beyond...
On August 21, 2026, U.S. Coast Guard law enforcement, a USCG Cyber Protection Team, a vessel inspector and an FBI Cyber Action Team boarded the 333-meter crude oil tanker VL Prosperity in the Atlantic after its network showed signs of compromise by a...
Dragos describes its Platform as a living knowledge engine built from over a decade of OT-specific telemetry, adversary research, and frontline expertise, and states it is the only ICS/OT cybersecurity company with a sensor monitoring 10 Gbps sustained...
Dragos argues that software and supply chain risk has sat at the bottom of xOT security priorities while the firmware and code beneath every networked asset became the attack surface attackers understand best. It cites three shifts: AI-assisted development...
This sixth post in Dragos's MTSA cybersecurity series covers the device security requirements under 33 CFR 101.650(b), which oblige each vessel owner or operator, or designated CySO, to document four things in Section 6 of the Cybersecurity Plan: an...
NDAA Section 889 bans federal agencies and contractors from procuring or using telecom and video surveillance equipment from Huawei, ZTE, Hytera, Hikvision, and Dahua, with the procurement ban effective August 13, 2019 and the use ban a year later. The use...
A Dragos OT threat hunter recounts a small electric utility that learned from the FBI, not its own staff, that its external IP was communicating with infrastructure tied to a state-sponsored group that had been in the environment for over 300 days. Within...
Dragos has joined Anthropic's Critical Infrastructure Defense Program, a partner-led effort to apply frontier Claude models to defending power grids, water systems, factories, and transportation networks. Dragos frames the move around xOT, the extended...
Dragos introduced a configuration drift report that tracks the gap between an organization's approved device settings and what is actually running, drawing on a single device record built from more than 2 million devices across 1,341 vendors, 84 device...
DirectDefense is partnering with Dragos to combine the Dragos Platform's OT asset visibility, threat detection, and investigation context with security operations run from DirectDefense's U.S.-based SOC. DirectDefense correlates Dragos findings with alerts...
A Dragos blog post on the Maritime Transportation Security Act's account security rule recounts that Colonial Pipeline's May 2021 shutdown began with a single employee VPN password reused from an earlier breach, an account that was never deprovisioned, and...
Dragos researchers Lesley Carhart and Jan Hoff report a sharp rise in incident response requests for legacy infections including Sality, Gammima, WannaCry, and Conficker in OT networks, with many affected networks carrying 20-70 discrete commodity malware...
Accenture, Dragos, and the SANS Institute announced the Community Cyber Resilience Foundation on October 20, 2026, to provide free cybersecurity software, hardware, deployment services, and SANS training to up to 500 under-resourced U.S. water, electric,...
Dragos, with Accenture and the SANS Institute, announced the Community Cyber Resilience Foundation, a nonprofit offering free security software, training, and OT-CERT membership to U.S. electric, gas, and water utilities with under $100 million in revenue....
Dragos Public Sector LLC, the federal subsidiary of Dragos, Inc., named a Board of Directors including Rob Joyce, former Director of Cybersecurity at the NSA, and Lieutenant General (Ret.) Maria Barrett, former Commanding General of U.S. Army Cyber...
This Dragos post walks through MTSA requirement 101.650(c), which requires that logs be securely captured, stored, and protected so only privileged users can access them, and that effective encryption protect sensitive data confidentiality and IT/OT...
Dragos reports that 81% of its architecture reviews found poor IT/OT segmentation, and its Segmentation product reads firewall, router, and switch configurations from more than 25 vendors to map which zones are permitted to communicate and trace each...
Dragos released a Segmentation product that analyzes firewall, router, and switch configurations from more than 25 vendors to model a topology, reveal permitted paths, and trace unexpected access back to the specific rules allowing it. The company reports...
Dragos announced on November 4, 2026 that Rob T. Lee, who spent more than 25 years at SANS Institute and most recently served as its Chief AI Officer and Chief of Research, joined the company as its first Chief AI Officer, reporting to CEO Robert M. Lee....
The Maritime Transportation Security Act's cybersecurity training rule requires baseline training for all personnel with IT or OT access, including contractors whether part-time, full-time, temporary, or permanent, plus two additional topics for key...
Dragos describes REA, an open-source MIT-licensed tool first published on GitHub in April 2026 that lets AI coding agents drive Ghidra or IDA and report findings without source code, installing from npm as an MCP server callable by Claude Code, Cursor and...
The 6th annual Dragos OT/ICS capture-the-flag drew 1,926 players on 1,269 teams to 57 challenges, and 312 teams solved all of them, with Knightsec finishing in 48 minutes and 21 seconds. Dragos reports that its 1,000-point challenges took a median of about...
Paul Lukoskie is Senior Director of Threat Intelligence at Dragos, where he leads the company's global OT cyber threat intelligence teams. He brings nearly 20 years of experience across the U.S. Navy, the federal government, and the private sector,...
The Dragos Industrial Security Conference (DISC) held its tenth annual event in Hanover, Maryland, November 4-6, bringing OT asset owners and operators together for three days of OT and ICS security research, industry discussions, and hands-on training....