Collection of cybersecurity reports, surveys, research papers, market studies, and industry intelligence.
725 articles
AWS’s Reimagine 2026 report, based on interviews with 154 executives, identifies shadow AI, data leakage and weak oversight as risks. It recommends risk-based controls, human approval for agents and privacy safeguards.
SOCRadar’s report analyzed infostealer records tied to more than 80,000 corporate domains, highlighting exposed AI accounts, sessions and API keys, and recommending stronger identity controls and monitoring.
Conifers assessed 14,652 detections and found that 47% in the average organization need attention. Organizations averaged 63% coverage of relevant threats and 64% protection for relevant MITRE ATT&CK techniques.
A VikingCloud survey of 200 U.S. and European retail and franchise security leaders found attacks often spread across locations. Corporate security mandates were linked to less spread, while many material incidents went unreported to executives.
CERT-AGID analyzed 182 campaigns affecting Italy during September 19–25 and shared 1,411 IoCs with accredited organizations. Phishing, malware delivery, and credential and payment-data theft featured prominently.
Honeywell’s survey of 603 critical-infrastructure leaders found limited continuous monitoring and complete asset inventories for building automation and IoT. Better inventories were associated with faster recovery, though the survey does not establish causation.
Recorded Future assesses that Russia is escalating hybrid tactics across Europe, including cyber operations, influence campaigns, airspace incursions, and physical sabotage, and warns these could develop into a broader campaign.
Eclypsium’s September report tracked 158 advisories covering 1,699 vulnerabilities and highlighted exploited flaws in infrastructure management systems, Linux kernel exposure across vendor advisories, and firmware weaknesses.
Honeywell’s 2026 OT cybersecurity report surveyed 603 leaders. While 88% described their programs as mature or design-led, 21% had a complete OT asset inventory; AI tools were common, but autonomous use remained limited.
DataDome’s report says malicious bot traffic rose 124% from July 2025 to June 2026, while 65.3% of 21,491 popular websites tested failed to detect any of 10 simulated bots. Tests covered homepages; attack traffic does not mean successful compromise.
AhnLab’s report tracks ransomware activity in August 2026, including affected industries and regions, a rise in top-10-group victim counts, Qilin’s attack on the ATF, and CL0P’s exploitation of PTC Windchill and FlexPLM vulnerabilities.
CSC’s 2026 report, based on a survey of 300 IP-law executives, identifies impersonation, phishing, and domain abuse as major risks. Respondents say AI is accelerating infringement, while fake executive profiles and fraudulent FIFA-related domains threaten users and data
In a Gartner survey of 297 cybersecurity leaders, 41% reported deepfake social engineering during audio calls and 36% during video calls. Gartner recommends default verification for risky requests, stronger identity controls, and cross-channel monitoring.
SpyCloud analyzed 10,000 water and wastewater organizations and found active infostealer exposure at 1,787. The study identified credentials tied to OT or remote-access systems at 258 organizations, but measured identity exposure—not confirmed intrusions.
A Barracuda survey of 2,000 IT and security decision-makers found that 38% of organizations lack expertise to secure and govern business AI, with larger gaps reported by some midmarket and AI-connected organizations.
Bitsight analyzed identity-related threat intelligence from the past year, finding the most results for non-human identity exposure. The figures are indicators, not confirmed breach counts; code repositories accounted for most results in that category.
ENISA’s 2025 EU threat-landscape analysis finds ransomware, DDoS and vulnerability exploitation remain prominent, with public administration the most targeted sector and cyber dependencies a source of significant risk.
AhnLab’s August 2026 report tracks infostealer distribution and detections, finding cracked-software lures, SEO poisoning, malicious email attachments and Ren’Py-based delivery; Remus was most frequently detected.
In a Surfshark study of 1,722 people, participants identified 40% of AI-generated social media comments. Positive, agreeable bots were harder to spot than negative ones, raising concerns about manipulation and privacy.
JPCERT/CC’s April–June 2026 monitoring found a sharp global surge in Mirai-like traffic to port 23/TCP. The increase may have been linked to Mirai infections exploiting a cPanel/WHM authentication-bypass vulnerability.
Check Point’s July–August digest finds evaluation models reaching real systems, while criminal AI use remains less capable. It also covers AI-assisted intrusions, attacks on AI tools, stolen AI access, and enterprise data-leakage risks.
CYFIRMA’s fortnightly summary lists Linux, Chrome and Android as the most affected technologies and reports a 21.11% decrease in observed vulnerabilities compared with the previous two weeks.
Acronis’s August 2026 threat update reports a Hugging Face breach involving autonomous AI agents, along with malware and URL-threat trends based on detections across more than one million endpoints.
Infoblox identifies illicit casino sites used for illegal gambling and money laundering, consumer scams, and PeckBirdy command-and-control. The research tracks more than 1.7 million Chinese-language casino domains and finds some C2 domains have little or no detection.
