Collection of cybersecurity reports, surveys, research papers, market studies, and industry intelligence.
725 articles
Okta’s Businesses at Work 2026 report finds that 91% of surveyed organizations use AI agents, but only 32% govern them as rigorously as human identities. Platform data also shows rising adoption of high-assurance authentication and automated governance.
A Microsoft–Accenture report examines AI-enabled cyber threats and quantum risks to encryption, combining survey findings and economic modeling with recommendations for national AI assurance, post-quantum migration and coordinated resilience.
A survey of 795 GRC practitioners finds spreadsheets remain a leading tool, while 59.1% use no commercial GRC platform. It also identifies technical skills gaps and differences in tool adoption by team size and seniority.
Thales reports that bad bots generated 40% of observed web traffic in 2025, while 27% of bot attacks targeted APIs. Daily blocked AI-driven requests rose to 25 million, though expanded detection coverage complicates year-over-year comparisons.
Kroll’s 2026 survey of 1,000 cybersecurity decision-makers finds 72% report frequent misalignment between business and security priorities. Rising budgets coexist with gaps in AI governance and post-incident response planning.
Reco’s 2026 report combines company telemetry with analysis of 500 public MCP servers, reporting widespread lack of IT oversight, risky tool capabilities, and 525 agent and LLM-tooling vulnerabilities disclosed in 18 months.
PwC’s survey of 3,887 executives across 72 countries finds cybersecurity readiness gaps despite rising budgets. Only 24% report spending significantly more on prevention than response, while quantum preparedness and data protection lag.
Rapid7’s 2026 threat report finds confirmed exploitation of newly disclosed CVSS 7–10 flaws rose 105% in 2025. Weak MFA remained a leading intrusion factor, while ransomware leak posts increased 46.4%.
A Torq-commissioned Sapio Research survey of 450+ security leaders finds AI use in SOCs is fragmented: teams average seven AI solutions, while respondents cite trust and explainability concerns and favor unified platforms.
A Sapio Research survey of 400 US and UK CISOs and senior IT leaders finds SOC teams face heavy alert loads, information overload, staffing constraints and compliance friction; the report advocates proactive threat hunting and better investigative context.
Thales’ 2026 survey of 3,120 IT and security professionals finds growing AI security pressures, incomplete data visibility and cloud protection gaps. Respondents report that an average of 47% of sensitive cloud data is encrypted.
Cloudflare’s 2026 Security Signals Report identifies risks in AI governance, autonomous systems, supply chains, threat intelligence, legacy architecture, and cloud dependencies, urging continuous controls and failure containment.
Zscaler ThreatLabz reports 896.2 TB in reported leaks across the top 10 ransomware groups by data volume, up 275.8%. Its April 2025–March 2026 analysis also examines Teams vishing, employee targeting and declining known ransom payments.
BioCatch’s 2026 report, based on data from 292 U.S. financial institutions, describes rising impersonation, phishing and job scams, more account-takeover activity, and a remote-access-enabled case study. It calls for real-time interbank fraud intelligence sharing.
Fortinet’s survey of 2,750 IT and cybersecurity decision-makers found 71% see skills shortages as a cyber risk and 60% struggle to recruit AI-experienced security talent. Meanwhile, 91% use or experiment with AI-powered security tools.
VulnCheck identified 884 CVEs with first-time exploitation evidence in 2025; 28.96% were exploited on or before CVE publication. Its annual report also highlights ransomware zero-days and growing volumes of unreliable AI-generated exploit code.
A Cybersecurity Insiders survey of 1,253 professionals, supported by Netskope, finds widespread AI security gaps: 94% report incomplete visibility, and only 9% say they can prevent risky agent actions before execution.
Cofense says credential phishing made up 92.1% of response-themed email reports in Q3 2026. Attackers exploit trusted email threads to deliver phishing pages or malware; the report recommends behavioral email defenses, training, and out-of-band verification.
SANS counted 1,654 AI-focused cybersecurity vacancies in a snapshot of 6,193 postings, while CyberSN reported AI Security Engineer postings up 268% year over year. Experts say AI literacy is becoming baseline, but AI expertise remains ill-defined.
A CSA survey of 433 IT and security professionals found 73% of organizations experienced a confirmed data-loss incident in the past 24 months, while only 16% said DLP blocked their most significant incident before data left the organization.
CrowdStrike reports that four threat actors used AI agents, including Claude Code, in intrusion campaigns between May and August 2026. The cases suggest agentic AI may lower barriers to offensive operations; the company assesses that activity will likely increase.
360 Privacy’s 2026 survey found security and wealth professionals link digital exposure with physical safety, citing perceived executive invulnerability, episodic security attention, and limited exposure metrics. It recommends regular exposure reviews and household-risk
Episki’s qualitative 2026 GRC report describes rising regulatory and framework demands, expanding automation, and vendor-risk gaps, with directional budget benchmarks and predictions for 2027.
Bitsight’s 2026 underground report records 6,883 ransomware attack postings in 2025, up 19%, and 2.8 billion newly observed compromised credential sets. It cautions that falling breach and stealer-log counts do not necessarily indicate lower risk.
