Published: 25 August 2026.
At the Energy Summit Trebinje conference (SET 2026), Kaspersky presented an analysis of cyber threats targeting the energy and industrial sectors of the Western Balkans, with a particular focus on Serbia. The data show that the region is not exempt from global trends — on the contrary, industrial systems are actively being targeted.
What the Numbers Show
According to Kaspersky Security Network data, Serbia ranks second in Eastern Europe by the share of industrial computers on which malicious objects were detected — 28.15%. This does not necessarily mean weaker protection than in other countries, but it clearly shows that industrial systems in the region are actively exposed to threats and require continuous improvement of security procedures.
How Attackers Approach Energy Systems
The analysis shows that attackers are increasingly using:
- Compromised suppliers and weaknesses in the supply chain
- Remote access to industrial equipment
- Outdated equipment and insufficiently segmented networks
- Social engineering aimed directly at employees in energy and utility systems
Bojan Antović of Kaspersky points out that digitalisation connecting IT and industrial (OT) systems brings efficiency, but also new security risks — attacks are no longer only global, but are increasingly tailored to local suppliers and infrastructure.
What the Experts Recommend
For effective protection of the energy sector, recommendations include:
- Continuous vulnerability assessment, not a one-off exercise
- Regular security audits
- Specialised solutions tailored to industrial (OT/SCADA) environments
- Additional training for teams managing industrial systems
- Treating cybersecurity as part of operational stability, not just an IT function
What This Means for Your Company
If you operate in the energy sector — generation, distribution, supply — this analysis confirms what the new Law on Information Security already formally requires: energy is among the priority sectors with the strictest obligations. Risk assessment, network segmentation and an incident response plan are no longer recommendations, but what both the regulator and the actual security situation on the ground demand.
Check whether the legal obligation specifically applies to your company — try the free NIS2 check. For a risk assessment or compliance plan tailored to the energy sector, request a free consultation.
Source
- TechZone.rs — “Energetski sektor Srbije i BiH na meti sajber pretnji”, 30 March 2026