cyber.hendryadrian.com
Security Report · github.com/jacobdjwilson

Astra’s 2026 Cybersecurity Statistics Report Highlights Ransomware, Phishing and Sector Risks

· Original Report (PDF) ↗

Summary

Astra’s compilation of 160 cybersecurity statistics covers ransomware, phishing, DDoS, IoT, API and cloud security, and industry risks, with basic mitigation advice.

Key points

  • The article presents statistics across malware, ransomware, DDoS, social engineering, phishing, IoT, web, mobile, API and cloud security, alongside industry-specific data.
  • It cites a figure of more than 72% of businesses worldwide affected by ransomware as of 2023 and reports an average ransom of $1.54 million that year.
  • The compilation cites nearly 7.9 million DDoS attacks in the first half of 2023 and notes that 13 DDoS-for-hire marketplaces were shut down by the FBI that year.
  • It reports that 94% of surveyed organizations had experienced security issues with production APIs in the prior year, and that unique API attacks rose 60% from 2022 to 2023.
  • The article highlights risks across sectors, including ransomware targeting manufacturers and phishing and ransomware affecting healthcare organizations.
  • Its general recommendations include enabling MFA, keeping software updated, limiting access, monitoring systems, and maintaining backups.

Article Details

Publisher
Astra
Report Period
Primarily 2022–2023 statistics, with some 2024 estimates and 2026 forecasts
Scope
Compilation of cybersecurity statistics covering attack trends, security topics, and affected industries.
Sample Size
Not disclosed
Key Statistics
  • Netscout reported almost 7.9 million DDoS attacks worldwide in the first half of 2023.
  • More than 280,000 WordPress sites were reportedly attacked using the WP Gateway plugin zero-day vulnerability.
  • The article reports that the MOVEit supply-chain attack compromised more than 620 organizations.
  • The article states that 61% of small and medium-sized businesses were hit in 2023.
  • According to the article, 92% of malware was delivered via email.
Recommendations
  • Enable multi-factor authentication across accounts.
  • Keep software up to date and apply security patches.
  • Maintain regular data backups and a disaster recovery plan.
  • Restrict access according to the principle of least privilege.
  • Conduct regular vulnerability scans and penetration tests.

Malware

EmotetMoreover, the first half of 2022 saw a massive 976.7% increase in Emotet detectionsVBA Trojanattacks, and the VBA Trojan was the most common malware variant in 2022.

Vendors

GoogleTo put this in perspective, in November 2022 alone, Google blocked over 231 billion

Products

Android82% of Android devices were vulnerable to at least one of 25 vulnerabilities in theWordPressMost of these vulnerabilities leverage WordPress plugins, with 97% of security breachesWP Gatewaysites were attacked using the WP Gateway pluginʼs zero-day vulnerability, according to

Countries

AustriaMoreover, no one is safe from such attacks, not even established governments. AustriaIrancompared to the first half of 2021. Iran is the country most impacted by mobile malware

Industries

EducationIn 2023, the rate of ransomware attacks in the education sector was more thanGaming and gamblingby 111% year-over-year. The gaming and gambling industries were the most targeted byHealthcareAccording to the U.S. governmentʼs OCR, healthcare firms reported 145 dataManufacturingRansomware struck 56% of manufacturing companies surveyed between January

Related Articles