websec
Findings and evidence
Kaspersky ICS CERT reports malicious objects blocked on 19.15% of monitored industrial-control-system computers in Q2 2026. Its breakdown separates regions, industries, threat categories and delivery sources, with different local trends behind the overall decline.
Why it matters
The useful comparison is between consistent populations and measurement periods. For an industrial investigation, relate alert volume to asset coverage, operational changes and the collection method before inferring a change in risk.
Scope and limits
Blocked-object statistics describe the vendor’s monitored population. They are not a global compromise rate, and a blocked detection does not necessarily mean a successful intrusion.
Primary source
Kaspersky / Securelist: original publication. Source published 2026-08-27. Brief prepared by websec.gr on 26 September 2026. This is an editorial research summary, not a claim of independent replication.