ransomware | Kaspersky ICS CERT

Report

Threat landscape for industrial automation systems. Q2 2025

The percentage of ICS computers on which denylisted internet resources were blocked increased in all regions. This growth is associated with the addition of direct links to malicious code hosted on popular public websites and file services.

Modern vehicle cybersecurity trends

TTPs of Cyber Partisans activity aimed at espionage and disruption

Blog

“Security researchers are the main factor motivating automakers to invest in protecting their products”

Faults in digital avionics systems threaten flight safety

Operation SalmonSlalom

Report an incident

Reports All

God Mode On: Researchers run Doom on a vehicle’s head unit after remotely attacking its modem

Exploiting a vulnerability identified in a modem installed in the head units of some vehicles enabled Kaspersky ICS CERT experts to gain complete control of the system.

20 November 2025

A brief overview of the main incidents in industrial cybersecurity. Q2 2025

More than 130 incidents were publicly confirmed by victims. Among them are not only high-profiled technology corporations and enterprises, but also the lake dam.

09 October 2025

Threat landscape for industrial automation systems. Europe, Q2 2025

In Southern and Eastern Europe, the risk of targeted attacks is high – there are high levels of email threats (phishing) and spyware. The review of key cybersecurity issues in European regions.

23 September 2025

More reports