Cyber Threat Actors Ramp Up Attacks on Industrial Environments

**Executive summary:** Cyble's 2025 threat landscape shows a near-doubling of ICS vulnerability disclosures (2,451 across 152 vendors), concentrated exploitation of HMI/SCADA systems, a sharp rise in ransomware (5,967 incidents) and data breaches (6,979), and expanded hacktivist campaigns targeting energy, transportation, manufacturing and healthcare—indicating heightened risk to critical infrastructure going into 2026.