Industrial Control Systems Face Growing Cyber Threats Across Critical Infrastructure

Operational technology (OT) and industrial control systems (ICS) are confronting an expanding cyber risk landscape. Recent data show internet‑exposed OT devices have plateaued at roughly 170,000‑180,000 IPs, yet the attack surface widens as modern PLCs support additional IT‑adjacent protocols such as MQTT, HTTP, SSH and FTP.

Key incidents this week include a Cisco Catalyst SD‑WAN Manager zero‑day (CVE‑2026‑20245) that has been exploited in limited attacks, and multiple vulnerabilities disclosed by Siemens in its programmable logic controllers, which could permit arbitrary code execution. A sophisticated cyberattack on water‑treatment facilities in Texas disrupted operations, underscoring the urgency for stronger OT defenses.

Regulatory and market responses are accelerating: the Cybersecurity and Infrastructure Security Agency (CISA) launched a new framework to improve ICS security, while Gartner reported a 56% year‑over‑year surge in ransomware attacks targeting manufacturers. The industrial cybersecurity market is projected to grow to $50.12 billion by 2035. Partnerships such as OPSWAT’s integration with Emerson’s Ovation Automation Platform aim to deliver patch‑management solutions for power and water operators.