Traversing the 2023 Operational Technology Cyber Threat Landscape

This Dragos year-in-review summarizes 2023 OT threat activity: nation-state actors like ELECTRUM carried out destructive operations against Ukrainian critical infrastructure, new groups (VOLTZITE, GANANITE, LAURIONITE) engaged in espionage and reconnaissance against electric and telecom sectors using LOTL and zero-days, hacktivists caused disruptive impacts to water utilities, and ransomware incidents increased substantially; Dragos recommends SANS OT controls and provides platform detections to improve ICS/OT resilience.