30 April 2026
Threat landscape for industrial automation systems. Australia and New Zealand, Q4 2025This quarter, Australia and New Zealand ranked first in terms of the growth in the percentage of ICS computers on which web miners were blocked.
Filter
30 April 2026
Threat landscape for industrial automation systems. Australia and New Zealand, Q4 2025This quarter, Australia and New Zealand ranked first in terms of the growth in the percentage of ICS computers on which web miners were blocked.
29 April 2026
Threat landscape for industrial automation systems. South and North America (Canada), Q4 2025In South America, the percentage of ICS computers on which malicious scripts and phishing pages, and worms were blocked significantly increased. The review of key cybersecurity issues in the regions.
28 April 2026
Threat landscape for industrial automation systems. Europe, Q4 2025Southern Europe led all regions in terms of the growth in the percentage of ICS computers on which ransomware and worms were blocked. The review of key cybersecurity issues in European regions.
27 April 2026
Threat landscape for industrial automation systems. Asia, Q4 2025Southeast Asia led the regions in terms of denylisted internet resources, web miners, viruses, and malware for AutoCAD. The review of key cybersecurity issues in Asian regions.
24 April 2026
Threat landscape for industrial automation systems. Middle East, Q4 2025In the region, there are countries with very different industrial cybersecurity situations. Yemen ranked second in the world by percentage of ICS computers on which malicious objects were blocked, while Israel was one of the 10 safest countries.
23 April 2026
Threat landscape for industrial automation systems. Russia, Q4 2025This quarter, the percentage of ICS computers on which worms were blocked increased noticeably in the region.
16 April 2026
Threat landscape for industrial automation systems. Africa, Q4 2025The permanent leader in the percentage of ICS computers on which threats from removable media were blocked.
02 April 2026
Threat landscape for industrial automation systems. Q4 2025During this quarter, the percentage of ICS computers on which worms in email attachments were blocked increased in all regions of the world.
19 March 2026
A brief overview of the main incidents in industrial cybersecurity. Q4 2025More than 160 companies publicly reported cyberattacks. This quarter, a disproportionately large number of incidents occurred in organizations from Japan and Taiwan.
06 March 2026
APT and financial attacks on industrial organizations in Q4 2025Scenarios in which cyberattacks used to search for and select targets during military conflicts, cyberespionage campaign orchestrated and executed by AI – the quarter was rich in interesting details of incidents.
Filter
30 March 2021
Network Asset Traversal or NATural disaster: NAT Slipstreaming 2.0NAT bypassing techniques recently published by researchers are particularly dangerous for OT networks of industrial enterprises
04 March 2021
More critical vulnerabilities identified in OPC protocol implementationsSolutions that use the OPC family of protocols are affected by multiple vulnerabilities that could lead to equipment failure, remote code execution or leaks of critical data
09 February 2021
Classics: vulnerabilities in web console and third-party components in Pepperl+Fuchs IO-Link-Master gatewaysThe vendor has published an advisory on vulnerabilities in multifunctional gateway devices designed to integrate different types of sensors and PLCs into industrial environments
05 February 2021
Getting back on Treck: more vulnerabilities in the infamous TCP/IP StackVulnerabilities have been identified in the IPv6 component in the Treck TCP/IP stack implementation. It is recommended that vendors of IoT devices using that implementation issue security advisories.
02 February 2021
Much ado about the certificate: what one should know about Siemens SCALANCE X switch configuration to avoid MitMSiemens has released a security alert which describes some cases of SCALANCE X-200/X-200IRT/X-300 switches using hardcoded encryption keys, making them prone to man-in-the-middle attacks
28 January 2021
Cryptographic deadly sins and the security of Modicon M100/M200/M221Weak implementation of cryptographic data protection allows various types of attacks and enables attackers to identify the key in captured traffic
27 January 2021
From buffer overflow to switchboard setup errors: vulnerabilities in building operation software by Schneider ElectricVulnerabilities in Schneider Electric’s low-voltage distribution system configuration software could enable attackers to upload arbitrary files defining electrical system parameters
26 January 2021
Twentieth for Ripple20: Vulnerability in embedded web server of I/O expansion modules for IoTSсhneider Electric has published an advisory on a critical vulnerability in the web server used in TM3 I/O expansion modules
26 January 2021
Critical vulnerability in Schneider Electric HMI configuration softwareThe vulnerability could cause a Windows local user privilege escalation when using EcoStruxure™ Operator Terminal Expert and Pro-face BLUE software and WinGP runtime environment by Schneider Electric.
26 January 2021
A classic that needs updating: fresh vulnerabilities in the software of Siemens SCALANCE X switchesDoS vulnerabilities have been disclosed in the integrated web server of Siemens SCALANCE X-200 / X-200IRT / X-300 switches. Measures proposed by the vendor do not prevent all possible attacks.
Filter
The finals of the Kaspersky Industrial CTF, an industrial cybersecurity contest, were just held in Singapore. The winner is the LC/BC team from Russia
MIT held Cybersecurity Insight, providing presentations, practical workshops and an ICS CTF in partnership with Kaspersky Lab
Kaspersky Lab presented its latest findings on CoDeSys Runtime vulnerabilities at the S4x19 conference, in what was a successful debut among competing industrial cybersecurity vendors
Another two-day course “Advanced Industrial Cybersecurity in Practice” was held in Germany. The course included theoretical sections followed by live demonstrations and exercises. An international group of participants left positive feedback
The online qualifications round for Kaspersky Industrial CTF 2018 took place on November 23-24. Over 1,000 teams registered with 130 eventually scoring points. The top 4 teams will participate in the finals
Kaspersky Lab ICS CERT is conducting a practical course in IoT vulnerability research. This class provides a deep dive into hardware analysis, firmware extraction and analysis, vulnerability research and exploitation.
In October 2018, Vyacheslav Kopeytsev, Security Researcher, Critical Infrastructure Threat Analysis, spoke at MALCON 2018, the 13th IEEE International Conference on Malicious and Unwanted Software, held this year in Massachusetts, USA.
Kaspersky Lab is launching the fourth international industrial Capture the Flag (CTF) security competition and inviting ethical hackers (whitehats) from across the world to test the security of smart devices and industrial systems
The sixth conference on industrial cybersecurity organized by Kaspersky Lab was held on September 19-21 in Sochi, Russia. This year’s theme was ‘Industrial cybersecurity: opportunities and challenges in digital transformation’.
On October 16, Kaspersky Lab and Fraunhofer IOSB are hosting a joint webinar to highlight the importance of ICS cybersecurity education and present a new ICS cybersecurity training course