Threat landscape for industrial automation systems. Q2 2026

Kaspersky Securelist Q2 2026 and August 2026 threat reporting covering industrial control system threats, vulnerabilities and exploits, Android head-unit malware forming a proxy botnet, APT backdoors and kernel-level rootkits, cyber-espionage toolkits, exploitation of unpatched TrueConf servers, cloud- and DNS-based command-and-control, mobile and endpoint malware trends, and adversary-in-the-middle phishing hosted on legitimate cloud platforms. The collection highlights active exploitation, stealth, credential and session theft, malware delivery, and evasion techniques across enterprise, OT,‌