Dragos tracked 125 ransomware incidents against industrial organizations in Q2 2022, down from 158 the prior quarter, with only 23 of the 43 groups it monitors active; Lockbit 2.0 accounted for 33 percent of attacks, Conti 13 percent, and new group Black...
Dragos reports that recent spear-phishing campaigns have narrowed their lures to engineering staff and critical-operations personnel, using themes such as a failed licensing exam, fake engineering resumes, and impersonated bodies including NCEES, NERC,...
Dragos announced on August 22, 2022 that CEO and Co-Founder Robert M. Lee won the 2022 SC Awards in Excellence for Security Executive of the Year, now in its 25th year. The release cites his work leading the Dragos Platform for ICS/OT asset identification...
Dragos and Fortinet partnered with Food Processing Magazine on a survey of the food & beverage industry, conducted online in April and May 2022 with 103 usable responses, covering technology readiness, digital transformation, and cybersecurity...
TSA Security Directive Pipeline-2021-02C requires owners and operators of critical pipelines and LNG facilities to identify their cyber critical systems, defined as any information or operational technology system or data that, if compromised or exploited,...
Dragos cites Ponemon Institute survey data showing insider threat incidents rose 47% from 2018 to 2020 and a further 44% in the two years after, with most affected companies experiencing more than 30 attacks per year. The post groups insider threats into...
Dragos appointed Hayley Turner as Regional Director for Australia and New Zealand and Ben Sullivan as Senior Channel Manager, announced 15 September 2022 from Melbourne. Turner, who spent more than five years in security intelligence with the Australian...
Dragos is holding its annual Industrial Security Conference (DISC) online on Saturday, November 5, 2022, a free full day of ICS/OT cybersecurity presentations for industrial asset owners and operators. Its Capture the Flag event runs online from November 2...
The CVE Program designated Dragos as a CVE Numbering Authority on September 20, 2022, authorizing the company to assign CVE IDs to newly discovered vulnerabilities and publish CVE Records, including for its own products and for third-party products not...
Dragos has integrated its Platform with Palo Alto Networks' ML-Powered Next-Generation Firewall, synchronizing OT asset profiles into firewall address groups so administrators can apply policies based on what is actually on the industrial network. The...
Dragos published a Gulf Cooperation Council (GCC) Water & Wastewater Systems Cyber Threat Perspective describing cyber threats currently targeting water and wastewater systems in the region. The report notes that GCC water and wastewater organizations...
Dragos introduced CentralStore, a new offering that aggregates multi-site data collected and analyzed from multiple Dragos Platform SiteStores, and said it is available now and can be licensed for multiple connected SiteStores. The company also cited a...
Dragos describes a Collection Management Framework (CMF) as a living spreadsheet documenting every digital asset in an ICS/OT environment - computers, data loggers, network equipment, PLCs - that holds logging or forensic data, along with what is logged,...
Dragos, Sentar, and Siemens Government Technologies built a joint OT monitoring and mitigation solution compatible with the MOSAICS reference architecture, aimed at the 2022 NDAA's direction for military departments to invest in OT cyber defense and map...
Dragos released Knowledge Pack KP-2022-007 for customers running Platform 2.x, containing over 260 characterizations and 530 detections drawn from more than a decade of OT incident and research data. The pack updates threat analytics, protocols, ICS/OT...
Dragos published a threat perspective report on threats to Australian electric organisations, citing evolving ICS/OT targeting adversaries, increased ransomware activity, supply chain threats, and sub-optimal security controls as drivers of elevated cyber...
Dragos tracked 128 ransomware incidents against industrial organizations in Q3 2022, up from 125 the prior quarter, with Lockbit 3.0 accounting for 35 percent (45 incidents) and manufacturing hit by 68 percent of attacks (88 incidents). Dragos observed 25...
Dragos ran PIPEDREAM, the seventh known ICS malware and the first cross-industry scalable ICS attack framework, against real hardware and found it could drive a mock water pipeline's pressure from 15 PSI to 100 PSI, close the solenoid valve, and deadhead...
The U.S. Transportation Security Administration issued Security Directive Pipeline-2021-02C, a revision to its pipeline cybersecurity requirements that followed the May 2021 Colonial Pipeline ransomware attack. Dragos says the directive resulted from...
A Dragos webinar with Food Processing magazine described how a Russian ransomware gang probed JBS USA's networks starting in February, spent three months exfiltrating potentially five terabytes of data, then shut down processing facilities in six states,...
Dragos launched a monthly blog series on OT cybersecurity best practices for under-resourced small and medium organizations, drawn from its free OT-CERT program. The first installment follows an OT-CERT tabletop exercise held at the Xylem Reach Conference...
Dragos released Knowledge Pack KP-2022-008, which assesses vulnerabilities affecting more than 200 hardware assets, including products from Phoenix Contact, Mitsubishi Electric, Hitachi Energy, Bachmann, Rockwell Automation, Siemens, Omron, and Emerson....
Dragos held its 6th annual Industrial Security Conference (DISC) on Saturday, November 5, 2022, focused on industrial threat intelligence, incident response, and cyber readiness. The company reports a 170% increase in in-person attendees over the prior...
Dragos was named to the 2022 Deloitte Technology Fast 500 for the second consecutive year, a ranking of the 500 fastest-growing technology, media, telecommunications, life sciences, fintech, and energy tech companies in North America. Dragos's revenue grew...
CISA and NIST partnered to create Cross-Sector Cybersecurity Performance Goals (CPGs) as part of the National Security Memorandum on Improving Cybersecurity for Critical Infrastructure Control Systems initiatives released in July 2021, offering voluntary...
Dragos research cited in a Manufacturing Leadership Council webinar says ransomware and other attacks on manufacturing are increasing, making the sector a top target, and in late October Europe's largest copper producer, Aurubis, shut down many IT systems...
Dragos has partnered with Cisco to integrate the Dragos Platform with Cisco Adaptive Security Appliance (ASA) firewalls, giving joint customers asset visibility across IT and OT networks so they can see risks, reduce attack paths, and block unknown threats...
On October 18, 2022, the Transportation Security Administration issued Security Directive 1580/82-2022-01 for designated passenger and freight railroad carriers, extending Security Directive 1580-21-01, with an effective date of October 24, 2022. The...
Dragos OT-CERT's monthly guidance for under-resourced organizations recommends that ransomware victims make recovery without paying the ransom their first objective, and that leadership and legal counsel hold a tabletop exercise before an incident to...
Dragos describes Neighborhood Keeper as a free, opt-in information-sharing network available only to Dragos Platform customers that shares aggregated threat intelligence at machine-speed across industries and geographic regions. Participation is anonymized...