The number of industrial control system (ICS) security advisories published in 2025 topped 500 for the first time since records began, with the severity of vulnerabilities also increasing, according to Forescout. The security vendor revealed the findings in its new report, ICS Cybersecurity in 2026: Vulnerabilities and the Path Forward. It said there were a total of 2155 CVEs published across 508 ICS advisories last year. That’s an increase from 103 CVEs across 67 advisories in 2011 – when records began. The average CVSS score of advisories climbed from 6.44 in 2010 to above 8.0 in 2024 and 2025. According to the report, the most affected asset types last year, in order, were: Purdue Level 1 devices: eg, field controllers, RTUs, PLCs and IEDs Purdue Level 3 operation systems: eg, MES,…