Dragos 2019 ICS Year in Review: Executive Summary

Dragos’ 2019 Year in Review summarizes threats to industrial control systems (ICS), reporting 438 assessed vulnerabilities, three newly identified ICS activity groups (bringing the total to 11), increasing supply-chain and ransomware risks (e.g., Ryuk, Emotet), common initial-access TTPs (phishing, password spraying, VPN/RDP targeting), and systemic defensive gaps revealed by red-team and IR engagements; the report concludes with prioritized recommendations to improve ICS visibility, deploy ICS-specific monitoring mapped to MITRE ATT&CK for ICS, and adopt risk-based defenses.