<\/p>\n
For electric environments where patching is often constrained by operational requirements, these timelines compress the window for defensive action. Of the vulnerabilities disclosed in 2025, approximately 4 percent of ICS vulnerabilities were actively exploited at the time of disclosure. In 2025, Dragos observed a median time of just 24 days between vulnerability disclosure and public exploit availability. Without a clear understanding of what assets exist, how they communicate, and what normal operations look like, it becomes extremely difficult to identify when adversaries are interacting with systems that influence grid operations. Across environments analyzed in 2025, Dragos consistently observes that lack of OT asset visibility remains one of the most significant drivers of cyber risk.<\/p>\n<\/p>\n