2026 OT/ICS Cybersecurity Report

Ten years ago, Jon Lavender, Justin Cavinee, and I founded Dragos with a focused passion on protecting OT from those who meant it, and the communities that depend on it, harm. When I started my career in this field there was no compendium of knowledge of the threats, vulnerabilities, and what insights could be shared from engagements like incident response. There were anecdotal insights and hushed rumors with lots of claims of classified insights hidden away somewhere. It is hard to build a professional community and have an understanding of what the right security efforts are on anecdotal insights. With that in mind, I started the Year in Review 9 years ago as a freely available report capturing the Dragos team’s knowledge on the threat landscape. Our goal was simple, keep the product pitching out of it and share whatever we are legally and ethically allowed to share that helps empower defenders. OT cybersecurity is obvious to people as necessary now, but ten years ago it was not. I remember telling the team early on that if Dragos failed it would at least be the Year in Review report we could leave behind; that every year we were contributing something useful to the community that could outlast us. Ten years later I’m proud that we are not at risk of going away and we are still sharing with this community we all love so much.