Lessons Learned From Examining More Than a Decade of Public ICS/OT Exploits

Dragos summarizes more than a decade of data on public ICS/OT exploits, reporting that they track over 3,000 CVEs with 400+ having at least one public exploit. The write-up defines what constitutes a public exploit, explains how these exploits lower attacker skill and can enable pivoting and persistence within ICS networks, maps exploit impact to Purdue Model levels (mostly Levels 1–3), and points readers to a companion white paper with findings and remediation guidance to prioritize vulnerabilities and reduce risk.