India, June 5 -- Elite ransomware groups are using USB bait, repurposed Trojans, and lax execution controls to get past old defenses and take control of industrial control systems. Honeywell's 2025 Cyber Threat Report is a red teamer's cheat sheet and a blue teamer's worst nightmare of an incident response drill; built from billions of logs and millions of file scans, their findings are bad configurations and stale assumptions about global OT environments.

If you still think ransomware true ransomware gangs need sophisticated exploits to get into industrial control systems, the report will set you straight. Honeywell's telemetry from 2024, October, to 2025, March, shows most successful intrusions occurred from mistakes. No zero days are ...