Collection of cybersecurity reports, surveys, research papers, market studies, and industry intelligence.
725 articles
KnowBe4’s April 2026 report records a 41% rise in Teams attacks and a 49% increase in calendar phishing over six months. Its telemetry also highlights growing reverse-proxy use and abuse of compromised accounts.
Proofpoint’s survey of 1,600 CISOs across 16 markets finds rising concern about AI and human risk. Reported material data loss fell to 53%, but affected organizations more frequently reported financial losses and regulatory sanctions.
BioCatch reports scams among its customers rose 35% in 2026; 90% of reported scam attempts were on mobile. The report highlights employment and investment scams and recommends behavioral signals to identify coercion and intervene before payment.
Gurucul and Cybersecurity Insiders surveyed 725 IT and security professionals: 90% reported insider incidents, 54% reported confirmed or suspected AI-related incidents, and only 20% expressed confidence in containing AI-related incidents before major damage.
CYFIRMA’s 2026 assessment outlines AI-enabled fraud and external cyber risks to India’s BFSI sector, cites survey and government data, and recommends stronger identity, transaction, attack-surface, third-party, and fraud-monitoring controls.
At-Bay reports cyber claim frequency rose 7% in 2025, with average severity reaching $221,000. Remote access dominated ransomware entry, while rapid fraud reporting was associated with better fund recovery.
KuppingerCole’s PAM report describes a shift from account vaulting toward governing privileged actions across human, machine and AI identities, comparing vendors’ just-in-time access, secrets protection and session controls.
Cato CTRL’s annual report examines enterprise AI security using 2025 telemetry from more than 4,000 customers, highlighting prompt injection, malicious AI workflows, data exposure, and the need for stronger governance.
Guardz’s 2026 MSP threat report analyzes September 2025–February 2026 telemetry, reporting a 23% rise in session hijacking and increased abuse of remote management tools across monitored SMB environments.
Google’s 2026 forecast anticipates wider adversary use of AI, continued ransomware and data-theft extortion, attacks on virtualization and crypto, and evolving nation-state operations; it also urges stronger AI governance and layered defenses.
A survey of 1,163 cybersecurity and IT professionals found persistent cloud security challenges, including tool sprawl, talent shortages, and limited confidence in real-time threat response. The report recommends shared visibility, integration, and outcome-focused
Hiscox’s 2026 report, based on a survey of 6,800 cybersecurity decision-makers at smaller organisations, examines cyberattack rates, business impacts, AI concerns and resilience measures.
Clairfield’s March 2026 sector report reviews cybersecurity deals, valuations, investment and market performance, and 2026 security trends, including demand for cloud, identity, AI, ransomware defense and incident response.
Bridewell’s 2026 survey of 600 UK critical infrastructure security professionals found 93% reported cyber attacks in the past year, highlighting disruption, response delays, asset visibility gaps and growing AI governance concerns.
GitGuardian’s 2026 report found 28.65 million new hardcoded secrets in public GitHub commits in 2025, up 34%. Internal repositories showed greater exposure, while 64% of a cohort of credentials leaked in 2022 remained valid in January 2026.
CyberSN’s report found US cybersecurity job postings fell 26.4% in January–September 2026, while demand for AI Security Engineers rose 268.3%. Nearly 15% of listings referenced AI, but the report does not explain the causes of the changes.
CYFIRMA says N0n posted 38 maritime-sector victim claims across 18 countries in October. No listed organization has publicly confirmed a breach, though KISA reportedly notified Korean firms and one acknowledged an intrusion notice.
CYFIRMA says N0n posted 38 maritime-sector leak-site claims across 18 countries in October. No listed organization has publicly confirmed a breach; KISA notifications and one intrusion notice suggest some claims may reflect real access. Encryption claims remain unproven
CERT-AGID reported 254 malicious campaigns affecting Italy during 10–16 October, including 217 targeting Italian entities, and shared 1,468 IoCs with accredited entities. The weekly findings included phishing, smishing and malware campaigns.
CYFIRMA analyzes risks involving agent telemetry, persistent memory and computer-use automation. It presents documented capabilities and test plans, but says the proposed attack mechanisms were not tested and are not reported incidents.
AWS reports that its Security Agent exploited 33 of 37 recent CVEs end to end in an audited benchmark. Two other exploit attempts took targets offline before the agent could retrieve the seeded flags.
Bitsight analyzed thousands of posts across 16 underground communities and found rising discussion of AI tradecraft, especially agents, open-weight models, and attack infrastructure, alongside declines in ransomware and phishing mentions.
Recorded Future assesses that Russia is expanding internet restrictions, surveillance and shutdowns while pursuing greater control over digital infrastructure. The report outlines risks to organizations and recommends mitigations, while judging a fully sovereign Russian
Censys found widespread Internet exposure of Danfoss StoreView controllers after attacks disrupted French supermarket refrigeration. Many exposed devices ran outdated firmware; operators largely removed controllers from the Internet rather than patching them.
