Censys report shows rise in exposed industrial control systems

A new research report from Censys reveals a global increase in exposed industrial control systems (ICS). At the beginning of 2026, researchers identified approximately 134,000 exposed ICS hosts, marking a 4% increase compared to 2024.

While the global attack surface is growing, Europe has seen a positive trend, with its share of global ICS exposure decreasing from 36.5% in 2024 to 32% in early 2026. Approximately 70% of internet-exposed ICS hosts are located within consumer and mobile networks. A significant security gap exists because registration data for mobile-connected ICS often points to the service provider rather than the operating organization, making it difficult to identify and notify owners of vulnerabilities.

The report highlights the real-world risks of unprotected systems, citing recent attacks on water and wastewater infrastructure in the United States. In those instances, attackers gained access to publicly reachable programmable logic controllers (PLCs), changed passwords and network configurations, and caused operational disruptions.