Publications

26 June 2025

The attack on Kuala Lumpur airport, which knocked out many of its information systems for 10 hours, plus over 100 more incidents.

• automotive,
• construction,
• data leakage,
• denial of IT services,
• denial of operations,
• denial of service,
• electronics industry,
• energy sector,
• food & beverage,
• logistics,
• manufacturing,
• metallurgy,
• mining,
• personal data leakage,
• ransomware,
• textile,
• transportation,
• utilities

10 June 2025

The internet ranks first among threat sources in all regions. The problem is particularly relevant to Africa, South-East Asia, South Asia and Russia.

• biometrics,
• buildings automation,
• construction,
• malware,
• manufacturing,
• miners,
• phishing,
• ransomware,
• spyware,
• statistics

08 April 2025

More than 100 companies publicly reported cyberattacks. Two of them announced their insolvency after the incident. In two other cases, two ransomware gangs simultaneously claimed responsibility for the same hack.

• automotive,
• data leakage,
• denial of IT services,
• denial of operations,
• denial of production,
• denial of service,
• electronics industry,
• energy sector,
• food & beverage,
• logistics,
• manufacturing,
• metallurgy,
• mining,
• personal data leakage,
• ransomware,
• retail,
• textile,
• transportation,
• utilities

17 March 2025

The percentage of ICS computers on which malicious objects were blocked increased in eight regions. Regionally, the percentage ranged from 10.6% in Northern Europe to 31.0% in Africa.

• biometrics,
• buildings automation,
• construction,
• malware,
• manufacturing,
• miners,
• phishing,
• ransomware,
• spyware,
• statistics

17 March 2025

The percentage of ICS computers on which malicious scripts and phishing pages as well as ransomware were blocked continued to increase.

• biometrics,
• buildings automation,
• construction,
• malware,
• manufacturing,
• miners,
• phishing,
• ransomware,
• spyware,
• statistics

19 February 2025

Many large companies, including some well-known brands, affected by cyberattacks. An unusually high number of victims were in critical sectors such as utilities and power and energy.

• automotive,
• construction,
• data leakage,
• denial of IT services,
• denial of operations,
• denial of production,
• denial of service,
• electronics industry,
• energy sector,
• food & beverage,
• logistics,
• manufacturing,
• metallurgy,
• mining,
• personal data leakage,
• ransomware,
• retail,
• textile,
• transportation,
• utilities

25 December 2024

The percentage of ICS computers on which malicious objects were blocked decreased from the second quarter to 22%. But the figure increased in Africa, South Asia, South-East Asia, the Middle East, Latin America, and East Asia. Regionally, the percentage ranged from 9.7% in Northern Europe to 31.5% in Africa.

• APT,
• biometrics,
• buildings automation,
• construction,
• malware,
• manufacturing,
• miners,
• phishing,
• ransomware,
• spyware,
• statistics

25 December 2024

The percentage of ICS computers on which malicious objects were blocked decreased by 1.5 pp from the second quarter to 22%. The biometrics sector led the surveyed industries in terms of this parameter.

• APT,
• biometrics,
• buildings automation,
• construction,
• malware,
• manufacturing,
• miners,
• phishing,
• ransomware,
• spyware,
• statistics

08 November 2024

A total of 35 incidents were confirmed by victims. Half of the attacks reportedly resulted in the denial of IT systems and the denial of operations. There is a case of a company that was unable to recover from the impact of a cyberattack and decided to cease operations.

• automotive,
• construction,
• data leakage,
• denial of IT services,
• denial of operations,
• denial of production,
• denial of service,
• denial of shipment,
• electronics industry,
• food & beverage,
• logistics,
• manufacturing,
• metallurgy,
• mining,
• personal data leakage,
• pharmaceutical,
• ransomware,
• transportation,
• utilities

03 October 2024

This summary provides an overview of the reports of APT and financial attacks on industrial enterprises that were disclosed in Q2 2024, as well as the related activities of groups that have been observed attacking industrial organizations and critical infrastructure facilities.

• buildings automation,
• manufacturing,
• miners,
• phishing,
• ransomware,
• spyware,
• statistics