Dragos released Knowledge Pack KP-2023-003, containing analysis of 300 vulnerable assets from vendors including Yokogawa, Siemens, Rockwell Automation, Omron, Schneider Electric, Hitachi Energy, WAGO, Phoenix Contact, and Mitsubishi Electric, with over 290...
Dragos and CrowdStrike are working together to help organizations implement a defensible architecture against threats that span both IT and OT environments. The stated rationale is that industrial-focused adversaries gain access to control systems by first...
Dragos OT-CERT's monthly best-practices blog for under-resourced organizations recommends that small and medium businesses implement a change management process for their ICS/OT environments, covering asset inventory, configuration security, cyber risk...
Dragos reported 2,170 ICS/OT CVEs in 2022, a 27 percent increase over 2021, and found errors in 34 percent of the advisories it analyzed, including CVSS errors in 14.9 percent of their CVEs. Dragos rated 70 percent of CVEs as more severe than their...
This Dragos blog is the second in a series on the ISA/IEC 62443 standards, offering a detailed overview of the documents within the series after a first post gave a general overview. The series aims to improve the reliability, integrity, and security of...
Dragos analyzed COSMICENERGY, ICS malware that Mandiant named on May 25, 2023, which targets IEC 104 devices by exploiting Microsoft SQL servers connected to remote terminal units. Dragos concluded that, contrary to media headlines claiming power...
Dragos announced the launch of its Global Partner Program on June 13, 2023, described as the only channel program combining OT cybersecurity technology, services, and threat intelligence. The program trains resellers through Dragos Academy self-paced...
Dragos published a whitepaper on cybersecurity challenges in manufacturing OT environments, citing poor network security controls, mixed high-tech and legacy connectivity, a lack of in-house expertise, limited visibility and monitoring, and the need to...
Dragos reported that 80 percent of its 2022 service engagements found limited to no visibility inside ICS/OT environments, and 50 percent identified network segmentation issues, often direct connections between OT segments and IT or business networks....
Dragos held its first Dragos Europe Forum at Battersea Power Station in London from June 26-28, drawing approximately 150 OT asset owners and operators from 16 countries. CEO Robert M. Lee's keynote on the industrial threat landscape centered on the need...
The Port of Nagoya, Japan's largest port, suspended operations on July 5, 2023, after a ransomware attack disrupted its communication systems and halted import and export processing, with operator Yokohama Kawasaki International Port Corporation shutting...
Rockwell Automation, in coordination with the U.S. government, analyzed a novel exploit capability attributed to APT actors affecting ControlLogix EtherNet/IP communication modules 1756-EN2 and 1756-EN3 (CVE-2023-3595) and 1756-EN4 (CVE-2023-3596),...
Dragos published the fourth blog in its series on Neighborhood Keeper, its information-sharing program, describing how data filtered and viewed over a longer time horizon can give a strategic view of the threat landscape across all program participants....
Dragos announced on July 18, 2023 that it is expanding its European operations, growing to 25 full-time employees across Europe since first establishing a UK presence in October 2021. The company said it identified 605 ransomware attacks against industrial...
Dragos and Macnica Corporation signed an agency agreement, announced July 19, 2023, to make Dragos's OT cybersecurity solutions available in Japan, with Macnica handling product selection, introduction, and post-introduction operational support. The...
Dragos recommends that organizations implementing secure remote access in OT environments build on existing IT identity and access management, segment IT, DMZ, and ICS networks with separate IP schemes, place jump hosts in a DMZ, and require multi-factor...
The Port of Nagoya, one of Japan's busiest ports and a hub for automobile exports including Toyota's, was hit by LockBit 3.0 ransomware in early July, disrupting its ability to load and unload containers until work resumed Thursday evening after a four-day...
Dragos tracked 253 ransomware incidents against industrial organizations in Q2 2023, an 18% increase over the prior quarter, with 33 of the 66 groups it monitors impacting industrial targets. Manufacturing absorbed 70% of alleged attacks (177 incidents),...
The TSA released Security Directive Pipeline-2021-02D, effective July 27, 2023, superseding and replacing SD-02C as a minor revision that maintains and reinforces the community-driven controls from SD-02C. SD-02D adds audit language, new timelines, and...
Dragos, a member of the AWS Partner Network, announced that the Dragos Platform is now available for purchase in AWS Marketplace, giving customers simplified procurement, consolidated billing, and the ability to apply committed AWS spend to the Platform....
Dragos announced on August 21, 2023 that it received two 2023 SC Awards, for Best Industrial Security Solution and Most Promising Unicorn, in a program now in its 26th year and judged by an independent panel drawn from healthcare, financial services,...
Dragos OT-CERT published a monthly best-practices blog for under-resourced organizations on implementing a change management process for ICS/OT environments, covering a change management tracker with fields for a unique change identifier, a named Change...
Dragos will hold its seventh annual Dragos Industrial Security Conference (DISC) on Sunday, November 5, 2023, in Hanover, Maryland, a free full-day event for industrial asset owners and operators covering ICS/OT cybersecurity research. The company says the...
Dragos released Knowledge Pack Plus 5.0, its first public release since moving to a quarterly and weekly release process, adding vulnerability coverage based on 12 new advisories from vendors including WAGO, Mitsubishi Electric, Rockwell Automation, Moxa,...
Dragos analyzed 465 advisories containing 2,170 CVEs in its 2022 ICS/OT Year in Review, an average of five CVEs per advisory, up from 703 CVEs investigated in 2020 - a 46 percent annual growth rate over four years. The post cites Ponemon Institute data...
Koch Industries deployed the Dragos Platform both on-premises and on AWS, specifically for Guardian Industries, to build an asset inventory and monitor its ICS/OT networks for threats, vulnerabilities, and malicious activity. Koch CISO Gabe Green said the...
Dragos announced a $74 million Series D extension led by WestCap on September 18, 2023, bringing the Series D round to $274 million and total funds raised to approximately $440 million. The company said the funding will support go-to-market initiatives and...
Dragos announced on September 19, 2023 at CrowdStrike's Fal.Con conference an expansion of its CrowdStrike partnership with two new integrations for bilateral data sharing, giving joint customers visibility into IoT/OT assets and vulnerabilities in the...
Building automation systems that control HVAC, lighting, security, and access control in smart buildings are increasingly connected, and the Dragos blog post states that this integration introduces vulnerabilities malicious actors can exploit. The post...
Dragos describes its WorldView subscription as analyst-driven ICS/OT threat intelligence built from over a decade of OT-specific telemetry, adversary research, and incident work, delivered as indicator feeds, vulnerability testing on physical devices, and...