Following a White House statement by President Biden urging critical infrastructure operators to immediately strengthen defenses against Russian intent to use cyber attacks, Dragos addressed what OT environments can practically do in weeks versus six...
Dragos announced on April 4, 2022 that it appointed Dawn Cappelli, former Vice President and CISO at Rockwell Automation, as OT CERT Director to launch and lead its OT Cyber Emergency Readiness Team, a community resource center available exclusively to...
Dragos assesses with high confidence that the biggest cybersecurity weaknesses European asset owners face are a lack of asset visibility into their networks and weak network authentication policies. Ten Dragos Activity Groups have conducted operations...
Dragos and Splunk released a Boss of the SOC (BOTS) virtual challenge titled "1UP Your ICS/OT Cybersecurity Team," a blue-team capture-the-flag in which participants use Splunk's BOTS platform to answer questions about incidents in a fictitious...
Dragos identified and analyzed PIPEDREAM, a modular ICS attack framework developed by the CHERNOVITE activity group, in early 2022 through its normal business, independent research, and partner collaboration. PIPEDREAM is the seventh known ICS-specific...
Dragos released Knowledge Pack KP-2022-004, which adds detections for the CHERNOVITE activity group and its PIPEDREAM modular ICS attack framework, alongside over 250 characterizations and 500 detections. Dragos states PIPEDREAM can execute 38 percent of...
Dragos announced on April 19, 2022 that the U.S. Department of Energy's Office of Cybersecurity, Energy Security, and Emergency Response (CESER) joined its Neighborhood Keeper network as a Trusted Advisor. DOE analysts gain access to anonymized, aggregate...
A Dragos blog post and accompanying whitepaper argue that software and supply chain services constitute a new class of insider threat to industrial control systems, citing the SolarWinds breach, which Business Insider reported was carried out through a...
Dragos describes PIPEDREAM as the seventh known ICS-specific malware, developed by the threat group it designates CHERNOVITE, and says it can disrupt, degrade, and potentially destroy industrial environments and processes. The post recommends OT-specific...
Dragos reports that PIPEDREAM, the seventh known ICS-specific malware, was developed by the activity group it designates CHERNOVITE and can disrupt, degrade, and potentially destroy industrial environments and processes. It can manipulate programmable...
Dragos tracked ransomware attacks on industrial organizations in Q1 2022 and found that while the number of attacks and dark web postings was slightly lower than in Q4 2021, the impacts were larger, with 75 percent of tracked attacks hitting the...
Dragos reported that 86% of its service engagements in 2021 showed a lack of visibility across OT networks, down from 90% in 2020. The 2021 Year In Review also flagged poor security perimeters, external connections to ICS environments, and a lack of...
Dragos CEO and co-founder Robert M. Lee is returning as a speaker at the World Economic Forum Annual Meeting in Davos, Switzerland, for the session "Securing Critical Infrastructure" on Tuesday 17 January, 15:00-15:45 CET, in the Salon at the Congress...
Dragos describes ICS network segmentation as the control that stops attackers from moving laterally once they have initial access, and warns that flat networks mixing assets like VoIP phones and IP cameras leave vulnerable protocols exposed. The post...
Dragos outlines a three-step roadmap for ICS/OT security programs - understand your risk, assess maturity and gaps using a 'Crawl, Walk, Run' approach, then implement and measure progress - which it says can produce tangible results in a year or less. The...
Dragos analysts note that security teams routinely ask whether an IOC from a months-old report still warrants concern, and the answer is "it depends" - there is no fixed end of life for an indicator. The post covers hashes, IP addresses and domains, noting...
Dragos announced on June 7, 2022 the launch of OT-CERT, a free resource portal giving industrial asset owners and operators access to OT cybersecurity best practices, maturity assessments, training, workshops, tabletop exercises, and webinars. OT-CERT will...
Dragos launched OT-CERT, an Operational Technology Cyber Emergency Readiness Team that offers free resources to help ICS asset owners and operators prepare for cyber threats and build OT cybersecurity programs. Membership is open globally, with...
Dragos and Splunk released a new integration that brings Dragos Platform OT capabilities into Splunk's Enterprise Security offering, pairing the Dragos OT add-on with Splunk's OT Security add-on. The integration provides ICS/OT asset discovery, threat...
Dragos's 2021 Year In Review found that 44% of its services engagements included findings related to shared credentials, accounts used in both IT and OT networks, down from 54% in 2020. The same review found 77% of engagements included a finding of...
Dragos and ServiceNow released an integration that shares the Dragos Platform's OT asset inventory with ServiceNow through an OT Management certified Service Graph Connector, giving ServiceNow visibility into OT assets it previously could not see. A second...
Dragos Professional Services describes running gamified cybersecurity incident response tabletop exercises (TTXs) for industrial customers, in which facilitators present a simulated intrusion scenario and guide participants through timed "injects" such as...
Ernst & Young LLP named Robert M. Lee, CEO and co-founder of Dragos Inc., an Entrepreneur of the Year 2022 Mid-Atlantic winner, selected by an independent panel of judges on entrepreneurial spirit, purpose, growth, and impact. Lee, who helped lead the...
Dragos reports that at least six of its designated threat groups - ALLANITE, CHRYSENE, DYMALLOY, HEXANE, RASPITE, and XENOTIME - have used supply chain attacks to gain initial access to target environments, citing SolarWinds as a prime example from the...
Dragos researchers, during a routine vulnerability assessment, found social media accounts selling password-cracking software for PLCs, HMIs, and project files, and determined the DirectLogic 06 tool did not crack the password but exploited a firmware...
Dragos announced on July 19, 2022 the expansion of its global agreement with Emerson, which has validated the Dragos Platform within its DeltaV distributed control system. The expanded agreement extends coverage beyond power producers and water utilities...
Dragos Principal Industrial Consultant Mike Hoffman argues that IT and OT have converged over the last 20 years but should not merge into a single mission, and that applying IT security controls to OT requires a different mindset. He says OT uptime must be...
SANS Institute and Dragos partnered for the SANS ICS Summit in June 2022 to build an industrial-focused Capture the Flag competition with challenges from beginner to advanced difficulty. The CTF used an oil and gas backstory in which adversaries hit ACME...
On July 21, 2022, TSA issued Security Directive Pipeline-2021-02C, effective July 27, 2022, replacing Pipeline-2021-02B and shifting pipeline cybersecurity requirements from a prescriptive, compliance-based standard to a functional, performance-based one....
Dragos appointed Omar Al Barghouthi, a 20-year industry veteran who previously served as Cybersecurity Sales Director at IBM Middle East, as its Regional Director for the Middle East on August 2, 2022. The appointment follows Dragos's March 2022 opening of...