Collection of cybersecurity reports, surveys, research papers, market studies, and industry intelligence.
725 articles
Forescout’s analysis of 2.5 million devices across more than 50 healthcare organizations found limited post-quantum readiness, including thousands of Internet-reachable systems handling medical records or imaging data.
Acronis telemetry from June–September 2026 found AI agent tools on 9.4% of Windows endpoints with EDR. Most were graphical apps, while 4.9% of MCP-capable tools had connections enabled, raising visibility and access-governance concerns.
Datadog analyzed more than 65,000 Kubernetes clusters and found over 3,500 bindings granting dangerous permissions to built-in principals, highlighting excessive RBAC access and configurations that may need review.
A cybersecurity report surveys how organizations are adapting identity, endpoint, cloud, human and other security practices to increasingly complex environments and evolving threats.
Microsoft’s 2026 Digital Defense Report says threat actors are using AI to speed vulnerability weaponization, phishing, malware development and intrusions, while more autonomous attacks may be approaching.
Intel 471 analyzed 85 records of criminal efforts to recruit insiders or buy employee-enabled access. Transportation, technology and telecommunications were the most targeted sectors; FedEx and UPS were mentioned most often.
A survey of 501 U.S. knowledge workers found that 43% received no formal AI training and 26% had no workplace AI policy or guidance. Most respondents failed to recognize prompt-injection risks to public-facing chatbots.
CERT-AGID reported 219 malicious campaigns affecting Italy during Sept. 26–Oct. 2 and shared 1,436 IoCs. The weekly summary covers phishing lures, malware, targeted CNR credential theft, and research finding over 500,000 exposed credentials.
Sekoia and Beazley trace ShinyHunters’ activity from 2020 to 2026, detailing its shifting access methods, decentralized identity, breach claims, law-enforcement actions and recent campaigns, including exploitation of a PeopleSoft zero-day.
PwC’s survey of nearly 4,000 business and technology leaders finds many organizations are unprepared for attacks on AI systems and are slow to adopt AI defenses and quantum-resistant security.
Researchers tested 21 vehicles and 30 apps, finding that some shared VINs, contact details, or location data with advertising, tracking, and analytics firms. They say disclosures often fail to explain those data flows.
GTIG found vulnerability disclosures doubled in 2026, while exploitation remained rare. Attackers exploited an AI-discovered BeyondTrust flaw within days and increasingly targeted AI orchestration and serving software.
A survey of 500 SOC staff found that AI often improves job satisfaction but may reduce junior analysts’ opportunities to build core skills. Respondents say deliberate training and formal role redesign can help address the shift.
Ridge tested eight LLMs across 96 autonomous penetration-testing runs and found results depended heavily on the agent harness and context. Coverage varied, costs differed sharply, and some models refused authorized test steps.
Truffle Security found 543,699 valid credentials in public GitHub repositories. Many remained exposed for years; over half fell outside GitHub Push Protection’s default coverage, though protected credential types saw fewer exposures.
Google Threat Intelligence Group found vulnerability disclosures and exploitation rising in 2026. Its report says AI-discovered flaws show a different risk profile, while exploitation growth appears driven mainly by n-days rather than zero-days.
Researchers tested 21 cars and 30 companion apps, finding third-party connections and sensitive identifiers sent by some apps to advertising and tracking firms. Honda said it stopped sharing location data with a vendor after the findings were presented.
Gen telemetry recorded 20.8 million blocked attacks associated with residential proxy networks from January to mid-September 2026, led by phishing. The study also found concentrated provider footprints, varied threat profiles and limited consumer understanding.
ReliaQuest’s report finds identity-led intrusions drove persistent cloud access and SaaS data theft in June–August 2026, while attackers also relied on trusted tools, valid accounts, and SMB for evasion and lateral movement.
An EU survey found widespread employee exposure to suspicious messages and strong interest in cybersecurity training, while identifying time, cost and employer support as barriers. ENISA also highlights threats from its latest landscape report and workplace learning and
A survey of 500 security professionals found that AI is improving job satisfaction for many SOC workers, but 47% expect it to make cybersecurity harder to enter. Respondents also anticipate new AI oversight roles and stress the need for human control.
ThreatLabz reports a 275.8% year-over-year rise in data stolen by leading ransomware groups, alongside shifting group rankings and attacks targeting business users through collaboration and remote-support tools.
Google Threat Intelligence Group reports that vulnerability disclosures and observed exploitation rose in 2026, while AI-discovered flaws skewed toward higher-risk issues. The report also tracks vulnerabilities and exploitation affecting AI systems.
AI can make phishing and impersonation faster and more personalized, but layered controls remain effective against many attacks. Deepfakes and biometric injection are harder to detect, so organizations should use independent verification rather than rely on familiar-se,
