<ul><li>The percentage of ICS computers on which malicious objects were blocked remained stable in Q1 2025, at 21.9%.</li><li>Quarterly figures show a decreasing trend year over year, with a decrease of 2.5 pp compared to Q1 2024.</li><li>Biometrics sector saw an increase in malicious object blocks, the only OT infrastructure type where this occurred.</li><li>Threat levels vary regionally, with Northern Europe at 10.7% and Africa at 29.6% affected ICS computers.</li><li>Denylisted internet resources blocked and email threats decreased in Q1 2025, hitting a low since 2022.</li><li>Primary threats from the internet include denylisted resources, malicious scripts, and phishing pages.</li><li>Malicious scripts, phishing pages, and documents showed an increase in blocks in Q1 2025.</li><li>AutoCAD malware saw the lowest percentage of blocks among ICS computers and continued to decrease.</li><li>Web miners and malicious documents blocks increased notably in Q1 2025.</li><li>The percentage of ICS computers on which worms, viruses, and cad malware were blocked decreased in Q1 2025.</li></ul>

Threat landscape for industrial automation systems in Q1 2025

Discover more