Threat landscape for industrial automation systems. Q2 2026

Q2 2026 ICS threat landscape: aggregated telemetry shows the global share of ICS computers with blocked malicious objects fell to 19.15% (lowest since 2022) with regional and industry variation—biometrics, Africa, and East Asia notable; malicious scripts/phishing remain the top category (5.42%), denylisted internet resources rose to 4.31%, ransomware prevalence stayed low (0.16%) while some categories (malicious documents, worms, AutoCAD malware) increased in specific regions and industries.