J.P. Morgan’s Investment Bank published a note on the cybersecurity vulnerability of operational technology such as aircraft autopilot systems, factory robots, power grid controls, and railway track shifting systems. It explains around 20% of information technology assets and 50% of operational technology assets were classified in the note as “unpatchable,” meaning that their vulnerabilities cannot be addressed solely through software updates and will require technology upgrades. These upgrades will take years, leaving many IT and OT systems exposed to cyber threats.
In the Garden of Good and Evil: Frontier AI Escalates Security Costs
J.P. Morgan Asset Management
Jahangir Aziz, Steven Palacio
Research
27 Pages
Key Takeaways
Cyber Spending Rises: Cybersecurity software revenue reached $140 billion in 2025 and is expected to grow to $270 billion by 2030.
Assets Need Upgrades: About 20% of IT assets and 50% of OT assets are considered unpatchable, requiring technology upgrades.
Costs Look Material: Necessary upgrades are estimated at $720 billion for IT assets and $770 billion for OT assets.