The 2025 OT Cyber Threat Report

In a world where cyber threats to operational technology are evolving at an unprecedented pace, making informed security decisions is more critical than ever.
The Waterfall Threat Report 2025 brings you comprehensive, verifiable data on cyber attacks that caused physical consequences in OT environments to help you understand today’s threat landscape and what’s required to face it.
Unlike other industry reports, the Waterfall Threat Report 2025 focuses exclusively on verified incidents with physical consequences. Each data point is meticulously documented and can be independently verified, making this the most credible and actionable OT security report available today.
Key Takeaways
Sharp Rise in Affected Sites: While the overall increase in attacks slowed, their reach expanded dramatically – by as much 146%.
Nation-State Threats Tripled: State-sponsored actors are increasingly targeting critical infrastructure and industrial operations with a variety of attack methods, including widespread GPS jamming and spoofing. A concerning shift in the threat landscape.
- Sharp Rise in Affected Sites: While the overall increase in attacks slowed, their reach expanded dramatically – by as much as 146%.
- Nation-State Threats Tripled: State-sponsored actors are increasingly targeting critical infrastructure and industrial operations with a variety of attack methods, including widespread GPS jamming and spoofing. A concerning shift in the threat landscape.
About the author
Waterfall team
FAQs About the 2025 OT Cyber Threat Report
What is in the 2025 OT Cyber Threat Report?
The Waterfall Threat Report 2025 brings you comprehensive, verifiable data on cyber attacks that caused physical consequences in OT environments to help you understand today’s threat landscape and what’s required to face it.
Why should I download it?
Unlike other industry reports, the Waterfall Threat Report 2025 focuses exclusively on verified incidents with physical consequences. Reading the report will help you understand today’s threat landscape and what’s required to face it.
What's one of the main takeaways?
One of the most alarming findings from the report is the dramatic rise in cyber attacks that lead to impairments in physical operations. The number of affected sites more than doubled, with a staggering 146% increase in 2024 – rising from 412 sites in 2023 to 1,015.
This shift signals an escalation in the severity of attacks, highlighting the need for heightened vigilance.