Dragos announced on November 29, 2021 that it is expanding in the Kingdom of Saudi Arabia, with its regional headquarters at the Saudi Information Technology Company (SITE) in Riyadh, supporting priorities tied to Saudi Arabia's SAR102 billion ($27.2...
Dragos held its first DISC Capture the Flag event ahead of its annual Industrial Security Conference, running from 12 pm ET on November 2 to 12 pm ET on November 4, 2021. Nearly 300 players on 191 teams from 28 countries registered, 7 teams completed every...
Dragos announced Dragos Academy on December 7, 2021, a training program for its customers and partners combining on-demand learning paths with in-person courses at training centers in the US, Australia, and Dubai. The company cited a Ponemon Institute...
Dragos describes detecting PLC key switch position changes over the network by monitoring CIP traffic, specifically the CIP Extended Device Status in the Identities Path, using Wireshark filters cip.id.ext==0x00000006 and 0x00000007 for Run and Program...
Security researchers disclosed a zero-day remote code execution vulnerability tracked as CVE-2021-44228 in the Log4j2 Java logging library, and Dragos Intelligence assessed with high confidence that it will impact OT networks given the library's ubiquity....
At Fortinet's OT Energy Symposium 2021, Dragos CEO Robert M. Lee gave a keynote on cybersecurity threats to the electric power sector, covering the Biden Administration's 100-day OT action plan and recommendations for ICS/OT asset owners on threat...
Congress passed H.R. 3684, the Infrastructure Investment and Jobs Act, allocating $91 billion to US rail and air infrastructure, and the Biden administration outlined new cybersecurity reporting standards for US rail operators covering all freight rail,...
A Ponemon Institute survey of more than 600 IT and OT security practitioners across 15 industries found that 63% had an ICS/OT cybersecurity incident in the past two years, with 29% of those hit by ransomware and about half of ransomware victims paying an...
Dragos describes asset visibility in ICS environments as more than an inventory: it maps the relationships and communication pathways between OT assets, showing how many hops apart they sit and how well they are segmented. The post cites a Dragos Year in...
Dragos reports that more than 91% of organizations include on-premises IT infrastructure assets in their existing or planned vulnerability management program, while only 23% do the same for OT assets. The blog attributes the gap partly to the difficulty of...
A Dragos webinar on secure digital transformation in manufacturing featured Deloitte's Jimmy Asher describing the Smart Factory @ Wichita, a nearly 60,000-square-foot facility that opened in December 2021 and was built as half working factory, half...
Dragos describes its xOT platform as a living knowledge engine built from over a decade of OT-specific telemetry, adversary research, and frontline incident expertise, covering every system that influences a physical process. The text states that state and...
In a Dragos webinar, Rockwell Automation CISO Dawn Cappelli and Dragos CEO Robert M. Lee advised OT security teams to win executive and board support by framing risk in plant downtime and revenue terms and by citing SEC filings of companies that were hit....
Dragos published a blog post describing its hiring and compensation practices, including listing pay and total compensation in job postings, publishing L1-L10 career paths with compensation visible at each level, and setting a single non-negotiable salary...
Dragos analyzed 37 ransomware strains on Dark Web leak and negotiation sites and counted 176 ICS-related victim postings in Q4 2021 - 58 in October, 57 in November, and 61 in December - with 41% of victims located in the U.S. and Germany and Italy tied at...
Dragos announced on February 14, 2022 that the NSA and CISA will join its Neighborhood Keeper network as Trusted Advisors, gaining visibility into anonymized, aggregate ICS/OT threat analytics, vulnerabilities, and indicators of compromise. Neighborhood...
Dragos's fifth annual ICS/OT Cybersecurity Year in Review, released February 23, 2022, named three new threat groups targeting ICS/OT environments, two of which gained access into industrial organizations' OT systems. The report also found OT...
Dragos reports that in 2021 major incidents hit industrial organizations, including a compromise of a water treatment facility with intent to poison its community and a ransomware attack on a pipeline operator that disrupted gas supplies to the...
Dragos describes penetration testing as a late-stage maturity activity for ICS/OT environments, to be ordered only after an architecture review and site assessment have surfaced and remediated findings. Its standard pentest runs within a 40-hour work week,...
Dragos named Christophe Culine as its first Chief Revenue Officer on March 3, 2022, tasking him with developing strategies to grow and scale global revenue. Culine previously served as President and CRO of RiskIQ through its definitive agreement to merge...
Dragos describes a penetration test in which its team, holding domain administrator access, used the built-in Windows Netsh utility to create a port-proxy firewall rule on a host in a "SCADA Security" group, listening on port 49897 and forwarding RDP...
Dragos published an Oil & Natural Gas Cyber Threat Perspective assessing cyber risk to the ONG sector as high, citing an increasing number of adversaries targeting oil and natural gas industrial organizations. Dragos data shows ransomware attacks on...
Dragos released Knowledge Pack KP-2022-003-A, which the company describes as containing the latest insight from its team and automating detection of devices and potential malicious activity across industrial networks. The packs provide regular updates on...
Dragos describes asset visibility and threat detection as two sides of the same coin in OT security, where OT-specific discovery tools feed detection with context such as whether east-west traffic is headed to an HMI or a Safety Instrumented System. The...
Dragos observed consistent network communication between Emotet command-and-control servers, suspected to be controlled by the Conti ransomware group, and numerous auto manufacturing companies in North America and Japan, from December 2021 through March...
Dragos was one of nine vendors that worked with NIST's National Cybersecurity Center of Excellence and MITRE to produce NIST Special Publication 1800-10, Protecting Information and System Integrity in Industrial Control System Environments, guidance for...
Dragos opened a United Arab Emirates office in Dubai Internet City on March 22, 2022, announced during its first appearance at GISEC 2022, following its November 2021 expansion in the UAE and Saudi Arabia. The office houses local incident response,...
Dragos analyzed the top MITRE ATT&CK for ICS Initial Access techniques used by its tracked Activity Groups and found that gaining access to a corporate/IT network was a more common mechanism for preparing a pivot into ICS/OT than direct access to ICS/OT...
Dragos reports that published ICS and OT vulnerabilities nearly doubled from 2020 through 2021, based on its analysis of 1,703 ICS/OT CVEs in 2021. The company says only 4% of those flaws required immediate action because they were actively exploited in...
The FY22 National Defense Authorization Act carried roughly 37 cybersecurity amendments, with provisions aimed at ICS/OT and critical infrastructure across ransomware, incident response, procurement, public-private partnerships, and critical...