2022 ICS/OT Threat Landscape Recap & What to Watch for This Year

Dragos' 2022 ICS/OT Year in Review summarizes a rising and increasingly dangerous industrial threat landscape: discovery of new ICS-specific malware (notably PIPEDREAM), active and evolving APT groups targeting electric, oil & gas, and manufacturing sectors, widespread exploitation of vulnerabilities (Log4j, Citrix, VPN/router flaws), and a heavy ransomware burden on manufacturing; the report stresses the potential for physical disruption and recommends SANS 5 critical OT controls.