Q2 2026 Threat Landscape for Industrial Automation Systems

• •ICS computers blocked malicious objects at 19.15%, lowest since 2022.
• •East Asia reported significant increases in various threat categories.
• •The biometrics sector led in blocked threats, particularly ransomware and email threats.

In Q2 2026, the percentage of ICS computers on which malicious objects were blocked fell to 19.15%, the lowest since 2022. Regional figures varied, with Northern Europe at 8.1% and Africa at 27.9%. East Asia saw a notable increase in blocked threats, particularly for malicious scripts and phishing pages, with a rise of 2.03 percentage points. The biometrics sector reported the highest percentage of blocked threats at 26.44%, leading in categories such as ransomware and email threats. The report indicates a growing trend of threats from denylisted internet resources and malware targeting AutoCAD. Overall, the global average of blocked threats has been declining, signaling a potential increase in vulnerability across industrial automation systems.