Ransomware activity against the industrial sector surges.

A 2026 intelligence roundup reports a 49% year-over-year surge in ransomware groups targeting industrial organizations (119 groups; ~3,300 victims in 2025), observed attacker tactics leveraging infostealer-obtained credentials and legitimate authentication to bypass perimeter defenses, the first known infostealer exfiltration of OpenClaw AI assistant configuration (including API keys/tokens), reduced CISA capacity during a DHS shutdown, and the arrest of a suspect linked to the Phobos ransomware operation.