PLC Attacks Expose OT Paradox: 60% Breached Despite Record Budgets

Detail

The breach rate is not evidence that security spending fails , it is evidence that spending categories are misaligned with the threat. Budgets are flowing toward detection and visibility tools, while adversaries are moving laterally from IT networks directly onto programmable logic controllers (PLCs) that lack native security controls.

The TXOne Networks 2026 Annual OT/ICS Cybersecurity Report, based on a survey of 200 C-level OT security decision-makers across six industries and five regions, paints a stark picture. Budgets are rising, teams are growing, but adversaries are moving faster.

of industrial organizations increased OT security budgets by more than 10% year-over-year.

of respondents confirmed their organization experienced at least one OT security incident in 2025.

has increased significantly, reflecting a structural shift away from IT-department oversight.

The European Union Agency for Cybersecurity (ENISA) further reports that over 42,595 new vulnerabilities were disclosed in the 2024, 2025 reporting period , a 27% increase from the prior year , with critical vulnerabilities now weaponized within days of disclosure.

At the center of this storm sits the programmable logic controller , the workhorse of industrial automation that governs everything from assembly lines to water treatment plants. Unlike IT servers, PLCs were designed decades ago for uptime and determinism, not cybersecurity. They lack native authentication, encryption, and logging. And they are now directly in the crosshairs.