2025 has been a year defined by sustained pressure on industrial environments, mirrored by increasingly complex global threat dynamics. According to the new Kaspersky Security Bulletin report , the share of ICS computers attacked with malware remained high, hovering around 21.9 in Q1 before declining to 20 by Q3. This demonstrates incremental defensive gains in cybersecurity for organisations amid continuously evolving attacker tactics. There are regional disparities, with Africa, South-East Asia, East Asia, the Middle East, and South Asia recording the highest shares of attacked ICS devices.
Threats by industries
Industrial sectors experienced uneven exposure to attacks, with biometrics topping the list at 27.4 of ICS computers with blocked malicious objects, followed by building automation 23.5, electric power 21.3, construction 21.1, OT engineering and integration 21.2, manufacturing 17.3, and oil gas 15.8. These figures show that all critical sectors remain prime targets for threat actors.
