OT Threat Landscape 2026: What OT Cybersecurity Defenders Need to Know
Summary: Dragos reports that in 2025 it tracked 119 ransomware groups impacting more than 3,300 industrial organizations worldwide, nearly double the number in 2024, alongside newly identified threat groups AZURITE, PYROXENE, and SYLVANITE. The report also estimates that fewer than 10 percent of OT networks worldwide have meaningful network monitoring in place, and that 30 percent of 2025 incident response cases began with someone noticing that something seemed wrong in operations rather than with a detection alert.
Bottom line: With fewer than 10 percent of OT networks monitored, adversaries like AZURITE and PYROXENE can work through engineering workstations and IT-to-OT pathways without ever touching a control system directly, so the intrusion surfaces first as an operational symptom rather than an alert.
Read the original at Dragos Blog ↗
- Topics
- OT / ICS & Critical Infrastructure
- Related
- Siemens RUGGEDCOM APE1808 Cyber Risks · Nov 12, 2026How to Assess OT Incident Response Preparedness Cyber Risks · Nov 10, 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem Cyber Risks · Nov 10, 2026