Collection of cybersecurity reports, surveys, research papers, market studies, and industry intelligence.
725 articles
Censys’ 2026 report finds growing exposure of AI-related tools, persistent ICS and legacy software exposure, and widespread use of non-standard service ports—visibility gaps that can hinder security programs.
A summary of the 2026 Hudson Rock Infostealer Index ranks 34 vendors across nine criteria. Hudson Rock leads with 96.2 points, followed by Flare and SpyCloud; the article says infostealer specialists generally outperform broad CTI platforms.
CYFIRMA’s April–September 2026 assessment describes telecom risks across India and SAARC, including exposed infrastructure, credential compromise, ransomware, data claims and APT threats. It recommends stronger vulnerability, identity and network defenses.
IBM's 2026 breach-cost study, based on 602 organizations, reports a $4.99 million average breach cost. AI-driven attacks rose 56%, while 92% of AI-related breaches involved no proper AI access controls.
Semperis's 2026 survey found that some organizations reported physical threats and intimidation tied to ransomware, but the claims were unverified. Dark Reading found no documented case of violence carried out for a ransomware attack.
Acronis’s September 2026 report says four espionage groups used the BlueMoon kit, which chained three Chrome and Windows zero-days. Endpoint malware detections fell to 4.3%, while URL-based threats rose in most focus countries.
Recorded Future identified 94 high-impact vulnerabilities in September 2026; 80 were actively exploited or weaponized. The report highlights zero-days, AI-assisted campaigns, and exploitation leading to credential theft, backdoors, data theft, and ransomware.
CYFIRMA's fortnightly roundup lists five critical vulnerabilities affecting Froxlor, IdentityIQ, Rancher, Logsign SIEM, and Netcore NR289-GE, with affected versions, fixes or workarounds, and remediation priorities.
CYFIRMA’s Q3 2026 report tracks 48 campaigns linked to four threat-actor nexuses, highlighting persistent backdoors, edge-device exploitation, overlapping attribution, and recommended patching and access controls.
CYFIRMA recorded 862 ransomware victim postings in September, down 26.3% from August. Its monthly report highlights shared affiliate toolchains, RMM and tunnel abuse, cloud data theft, BYOVD, and attacks on recovery and cloud systems.
AhnLab’s September 2026 review highlights phishing and downloader activity, Telegram-based theft of financial-sector credentials, and dark-web data-leak and ransomware claims involving financial organizations.
AhnLab’s September 2026 report summarizes ransomware activity, including 470 incidents attributed to the top 10 groups, affected sectors and regions, new groups, and several officially announced disruptions in Japan.
CYFIRMA’s Q2 2026 government and civic report finds broad, sustained threats, including 55 APT campaign updates, 78 reported incidents, rising RCE vulnerability mentions, persistent dark-web chatter, and 142 ransomware victims.
CYFIRMA’s assessment of India and SAARC manufacturing through September 15, 2026, highlights ransomware, identity compromise, vendor access, and IT/OT exposure, and recommends stronger segmentation, access controls, and resilience.
CYFIRMA’s January–August 2026 assessment says India’s government and defence sector faced persistent cyber threats, led by nation-state espionage and identity compromise, with ransomware, supply-chain risks and AI-assisted activity also highlighted.
CERT-AGID tracked 178 malicious campaigns affecting Italy during Oct. 3–9 and shared 1,233 indicators of compromise with accredited entities. Phishing, malware delivery, and WhatsApp account-takeover scams were among the reported threats.
CYFIRMA's mid-year update reports that 82% of 2025 detections were malware-free and eCrime breakout averaged 29 minutes. It expects identity- and session-based intrusions without persistence to remain a dominant pattern.
CYFIRMA’s regional report finds identity-based access is a leading ANZ attack pattern, details ransomware and sector trends, and recommends stronger authentication, supplier security, and vulnerability patching.
CYFIRMA’s Q2 2026 industry report says ransomware victim listings for real estate and construction rose 42.9% quarter over quarter to 290, while APT campaign activity and exposure to remote-code-execution vulnerabilities also featured prominently.
Sonatype counted 149,329 malicious open-source packages in Q3 2026. Its index highlights droppers and secrets theft, including Mini Shai-Hulud's credential-enabled package propagation, and urges defenders to investigate impacts beyond dependency cleanup.
Japan’s Active Cyber Defense framework introduces mandatory reporting for designated critical infrastructure operators on October 1, 2026. Communications-analysis powers follow in 2027; the report assesses implementation, oversight, threat activity, and operational gaps
Proofpoint’s five-year CISO findings show rising concern about AI and human risk, persistent data loss, and greater board alignment alongside growing expectations—shifting security priorities toward protecting data and access within everyday workflows.
CYFIRMA’s report finds elevated education-sector cyber risks, including state-sponsored campaigns, credential theft, rising vulnerability disclosures and 85 ransomware victims in the latest 90-day period.
Lookout reports persistent mobile phishing exposure in Q3 2025, higher encounter rates on iOS than Android, and continued risk from unpatched browser vulnerabilities across mobile devices and apps.
