⚠️ Region Alert: UAE/Middle East
The first quarter of 2026 saw a notable decrease in the percentage of Industrial Control System (ICS) computers where malicious objects were blocked, reaching a three-year low of 19.6%. This global trend, however, showed significant regional variations, with Northern Europe reporting the lowest rates and Africa the highest. Southern Europe and Russia were exceptions, experiencing increases in blocked threats, particularly from internet and email-borne attacks, spyware, and malicious scripts. The Middle East also saw an increase in web miners, alongside South Asia and Africa.
Biometric systems consistently recorded the highest percentages for blocked threats across industries, attributed to their internet connectivity, extensive email use, and often limited cybersecurity controls. While most sectors mirrored the global decline, the manufacturing industry experienced a slight uptick in malicious object blocking. Malicious scripts/phishing pages, spyware, and denylisted internet resources remained prominent threat categories, although ransomware and web miners reached their lowest observed values.
An analysis of threat sources revealed an increase in internet-originated threats, especially in Southern Europe and Southeast Asia. In contrast, threats delivered via email clients, removable media, and network folders continued their downward trajectory, hitting new lows. The report underscores the importance of ongoing vigilance and tailored cybersecurity strategies for ICS environments, given the diverse regional threat landscapes and industry-specific vulnerabilities.
Top comments (0)