Threat landscape for industrial automation systems. Q1 2026

Kaspersky ICS CERT's Q1 2026 threat report shows malicious objects were blocked on 19.6% of ICS computers globally — the lowest figure in three years. Regionally, Africa had the highest rate (27.4%) while Northern Europe had the lowest (9.1%). Southern Europe and Russia saw notable increases across multiple threat categories including spyware, internet threats, and email-delivered malware. Biometric systems consistently ranked as the most-targeted industry, with 26.4% of computers affected and email threats exceeding internet threats in that sector. Ransomware hit a record low of 0.14%, while malicious scripts and phishing pages remained the top threat category at 6.56%. Malware from 10,052 distinct families was blocked across industrial automation systems during the quarter. Key regional hotspots include Southeast Asia for internet-sourced threats and viruses, and Central Asia/South Caucasus for ransomware in oil, gas, and manufacturing.

Source: https://securelist.com/industrial-threat-report-q1-2026/120643. 8 Sync News only summarizes and links out; content copyright belongs to the authors and original sources.