MITRE Engenuity released its first ATT&CK Evaluations for Industrial Control Systems in 2021, emulating the tactics, techniques, and procedures of the TRISIS/TRITON malware, which the source describes as the first malware tailored to attack safety systems...
Dragos CEO and co-founder Robert M. Lee testified before the U.S. Subcommittee on Oversight and Investigations of the Committee on Energy and Commerce at a hearing titled "Stopping Digital Thieves: The Growing Threat of Ransomware." Lee told the...
Six months after the Log4j flaw (CVE-2021-44228) was disclosed by Alibaba Cloud Security, Dragos assesses with moderate confidence that it will remain a persistent vulnerability in ICS environments for years, since Log4j is often an embedded component of...
TSA, the sector-specific agency for pipelines, issued its first pipeline directive on May 27 and a second on July 20, though the second directive's particulars have not been made public. The May 27 directive calls for a Validated Architecture Design...
Dragos announced an integrated OT vulnerability management capability for its Platform, drawing on more than a decade of OT-specific telemetry, adversary research, and incident work codified in its Knowledge Packs. The release provides corrected, enriched,...
MITRE Engenuity released its 2021 ATT&CK Evaluations for Industrial Control Systems results, presenting vendor performance across four categories - Detection Count, Analytic Coverage, Telemetry Coverage, and Visibility - without declaring a winner or...
A SANS Institute study cited by Dragos found that more than 91% of organizations include on-premises IT assets in their existing or planned vulnerability programs, while just 23% do the same for OT assets. Dragos also reports that public vulnerability...
Dragos recounts that the 2017 XENOTIME compromise of Schneider Electric's Triconex SIS controller succeeded because the controller's key switch was in "Program" mode, allowing TRISIS malware to upload and download project files from a compromised...
Dragos tracks more than 3,000 CVEs affecting ICS and OT networks, of which more than 400 have at least one publicly available exploit, some with multiple. The company says its public ICS/OT exploits span every level of the Purdue Model, were developed by...
A Dragos Principal Incident Responder describes five common preparation gaps that inflate the time, personnel, downtime, and expense of handling a cybersecurity incident. The gaps include missing current network topology and asset documentation, an...
Dragos and the Downstream Natural Gas Information Sharing and Analysis Center announced an initiative to strengthen ICS/OT security and community-wide visibility for the North American natural gas industry, with Dragos's Neighborhood Keeper scheduled to be...
Dragos research, drawing on the LOGIIC Project 12 Safety Instrumentation Report, describes 'device state' attacks in which HART-protocol sensors are placed into 'fixed current' or 'loop current' modes so their analog readings no longer reflect the process....
Dragos and the Oil and Natural Gas Information Sharing and Analysis Center announced a joint initiative, dated September 16, 2021, to strengthen security and community-wide visibility for ICS/OT in the North American oil and natural gas industry. ONG-ISAC...
Dragos reports that cyber intrusions and attacks on the Electric sector are increasing, and in 2020 it identified three new Activity Groups targeting the sector: TALONITE, KAMACITE, and STIBNITE. Two-thirds of the 15 Activity Groups Dragos tracks perform...
MITRE released results in July 2021 from its first MITRE Engenuity ATT&CK Evaluations for ICS, which analyzed five industrial cybersecurity vendors for threat behavior detection efficacy in OT environments. Dragos, which participated, presented a webinar...
Dragos announced a partnership with Deloitte as Founding Sponsor to feature the Dragos Platform in The Smart Factory @ Wichita, a simulated manufacturing environment at the Wichita State University site that is expected to be ready later this year. Infor...
CISA and NIST published initial cybersecurity performance goals and objectives for critical infrastructure control systems in September 2021, following Section 4 of a White House National Security Memorandum that called for DHS and NIST coordination. The...
The Biden Administration released a 100-day initiative to improve cybersecurity across hazardous liquid and natural gas pipelines, complementing TSA security directives that require pipeline owners and operators to implement protections in their IT and OT...
All North American Class 1 Freight railroads must implement Positive Train Control, a government-mandated safety overlay whose communications infrastructure relays critical data between several thousand components. Meteorcomm, wholly owned by BNSF, Union...
Dragos announced on October 19, 2021 that it is expanding into the UK to give industrial organizations there more direct access to its ICS/OT cybersecurity technology and services and to develop and train ICS/OT talent in the region. The move follows an...
Dragos describes how many organizations still track OT assets through manual, isolated processes such as Excel spreadsheets and Visio workflows built from purchase records and annual facility walkdowns. The company argues that continuous, automated...
Dragos raised $200 million in Series D funding at a $1.7 billion valuation on October 28, 2021, a round led by Koch Disruptive Technologies and funds and accounts managed by BlackRock. The company said the round was the largest and highest valuation...
Dragos announced on November 2, 2021 an integration of the Dragos Platform with ServiceNow Operational Technology Management, letting joint customers catalog industrial devices alongside existing enterprise assets through the OT certified Service Graph...
Forrester Research published its first Forrester Wave for Industrial Control Systems Security Solutions, scoring vendors across 27 criteria including protocol support, asset discovery, vulnerability management, threat detection, and secure remote access,...
A Ponemon Institute survey of 603 IT, IT security and OT security practitioners, sponsored by Dragos and released November 10, 2021, found that only 35% of organizations have a unified security strategy covering both IT and OT, and only 21% have reached...
Dragos and the Ponemon Institute surveyed 603 IT, IT security, and OT security practitioners across the United States to assess the maturity of their industrial cybersecurity programs. Fifty percent of respondents were optimistic about their ICS/OT...
Dragos released Knowledge Pack KP-2021-008-M, a collection of updates from its Threat Intelligence team that automates detection of potential malicious activity on industrial networks. The release broadly addresses ransomware in ICS/OT environments along...
Dragos, Inc. ranked 45 on the 2021 Deloitte Technology Fast 500, a ranking of the 500 fastest-growing technology, media, telecommunications, life sciences, fintech, and energy tech companies in North America now in its 27th year. CEO Robert M. Lee...
Dragos reports that manufacturing has been hit hardest by ransomware, at a ratio of almost two to one compared with other industries, with Molson Coors, Honeywell, JBS, and Colonial Pipeline among those ransomed in the prior six months. The average...
Dragos announced on November 29, 2021 that it is expanding in the United Arab Emirates, including a new Dubai office planned to open in Q1 2022, to give regional organizations more direct access to its ICS/OT cybersecurity technology and services. The...