2021-ics-ot-cybersecurity-year-in-review-report.pdf (3 MB)

Dragos' 2021 ICS/OT Cybersecurity Year in Review covers industrial threat activity, ransomware pressure on infrastructure, incident response lessons, and recurring security weaknesses in operational technology environments. The report tracks known activity groups, including STIBNITE, WASSONITE, and KAMACITE, and names newer groups such as KOSTOVITE, PETROVITE, and ERYTHRITE. It treats ransomware against pipelines, food supply, and other industrial sectors as a major 2021 concern, with sections on Conti, LockBit 2.0, and the business maturity of ransomware groups. Dragos' field findings point to weak OT visibility, poor security perimeters, external ICS connections, and lack of separate IT and OT user management.