Fresh research from Kaspersky has found that almost 90% of industrial organisations in sectors such as energy, manufacturing, and oil & gas have been hit by cyber-attack in the past year, with many suffering from repeated breaches.

In the energy sector alone, the figures are even starker, with 95% of organisations reporting being targeted, often resulting in operational downtime and financial losses. 

The new report shows that these critical sectors are becoming more vulnerable to cyber-attacks as industries increasingly adopt connected and automated technologies, compromising sensitive data and causing costly disruptions.

In its survey of 406 C-level decision-makers, Kaspersky also found 21% of respondents ranked IoT vulnerabilities as their top security concern, saying that rapid adoption of IoT in industrial settings has expanded the attack surface, creating further entry points for cybercriminals.   

The study shows that human factors continue to pose a significant risk, with 18% of decision makers identifying insider threats as a persistent problem, alongside concerns about unauthorised access and credential theft, with Kaspersky claiming this highlights the need for stronger access controls and monitoring of activities conducted by employees.

A quarter of respondents cited confusing technical jargon and lack of clarity among the key barriers preventing organisations from fully understanding their cybersecurity needs, while an equal number pointed to difficulties in quantifying cyber-risks and balancing regulatory compliance with operational efficiency.

Budget constraints, often considered a significant hurdle, were less prominent, with only 20% of respondents listing them as a major concern, leading Kaspersky to suggest that complexity and understanding, rather than cost, are the primary roadblocks to implementing more effective cybersecurity defences.

The results also show that vulnerabilities within Operational Technology (OT) environments have come to the forefront as industrial operations increasingly rely on interconnected systems and automation. 

OT, which involves the management of physical processes and machinery, is particularly susceptible to targeted cyber-attacks with many organisations finding it difficult to secure these systems, leaving them exposed as threats shift from IT networks to OT infrastructures. 

Recommended reading

• New Report Highlights Collabs Between Nation-states, Cyber-crime Rings
• NCSC Issues Warning Over Iran Spear-Phishing Attacks
• 67% of Healthcare Organisations Hit by Ransomware In the Past Year

“Our research shows that cyber-attacks in industrial sectors are not a matter of ‘if,’ but ‘when,’” said David Emm, principal security researcher at Kaspersky.

“As businesses digitise and connect more of their operational technologies, the need for robust and holistic cybersecurity strategies has never been more pressing. Organisations must address both IT and OT vulnerabilities if they are to stay ahead of and manage the evolving threats landscape.”