The Industrial Cyberthreat Landscape: Year in Review Report with Updates
summary
Yearly analysis claims about 22 tracked OT threat groups and a new cross‑industry framework (Pipedream / CHERNOVITE) that leverages CODESYS in 500+ vendors, Modbus TCP and OPC UA to enable repeatable disruption, with Dragos and government partners dissecting it after it is employed somewhere but not widely deployed. Report shows Pipedream covers 46% of ICS tactics, identifies reconnaissance against about 13 likely targets in US LNG and electric, finds 600+ incidents last year with 437 manufacturing ransomware hits, plus pervasive visibility and segmentation gaps.
AI-written summary · about
chapters (13)
- 0:00Introduction and welcome
- 1:05Year in review report purpose
- 3:11Threat group tracking methodology
- 6:45BENTONITE threat group overview
- 9:52CHERNOVITE pipedream capability
- 13:27CHERNOVITE legal and analysis details
- 19:51KOSTOVITE group and infrastructure
- 23:41XENOTIME and TRISIS capability
- 27:34KAMACITE and Cyclops Blink malware
- 29:45Ransomware trends and impact
- 34:22Vulnerabilities in OT environments
- 40:44Five critical ICS cybersecurity controls
- 51:34Report resources and Q&A
related talks
53mThe Evolution of Industrial Cyberthreats: Year in Review Report
30mThe Hunt for Major League IoT-ICS Threats: A Deep Dive into IoT Threat Terrain
30mForced Digital Transformation and the Realities to ICS/OT Cybersecurity
30mPractical Attack Vectors and Their Ideal Defensive Strategies for ICS & SCADA
26mFrom Existential to Reality: 3 Experts on the Evolution of ICS Threats
47mTrend Micro's VP of security research reveals the latest IoT threats and how to combat them
42mKeynote: The Expanding Universe of Cyber Threats
33mIndustroyer: biggest threat to industrial control systems since Stuxnet