Kaspersky ICS CERT

Report

Threat landscape for industrial automation systems. Q1 2025

The percentage of ICS computers on which various types of malware spread via the internet and email were blocked increased for the first time in two years.

Blog

Why APTs are so successful – stories from IR trenches

TTPs of Cyber Partisans activity aimed at espionage and disruption

Operation SalmonSlalom

Report

Targeted attack on industrial enterprises and public institutions

Report an incident

Reports All

A brief overview of the main incidents in industrial cybersecurity. Q1 2025

The attack on Kuala Lumpur airport, which knocked out many of its information systems for 10 hours, plus over 100 more incidents.

26 June 2025

APT and financial attacks on industrial organizations in Q1 2025

Using polyglot files, involving the 7-Zip vulnerability and the 0-click vulnerability in MS Windows – there are some interesting details of attacks on industrial enterprises disclosed at this quarter.

19 June 2025

Threat landscape for industrial automation systems. Regions, Q1 2025

The internet ranks first among threat sources in all regions. The problem is particularly relevant to Africa, South-East Asia, South Asia and Russia.

10 June 2025

More reports