Collection of cybersecurity reports, surveys, research papers, market studies, and industry intelligence.
729 articles
Acronis analyzed 100 million script runs across 11,500 organizations, finding automation is concentrated, scripts are often abandoned, and AI-generated scripts are entering production. The findings highlight risks from stale scripts, embedded secrets and misuse of admin
Hunt.io analyzed Middle Eastern infrastructure from February to May 2026, identifying 1,357 C2 servers across 98 providers. The report details provider concentrations, malware detections, and campaigns, while cautioning that tool fingerprints alone do not prove abuse.
Digital.ai’s 2026 report says attacks affected 87% of monitored client-facing apps, up from 55% in 2022. It also reports a narrowing iOS-Android attack-rate gap and rising rates for automotive and medical-device apps.
WhoisXML API analyzed 26.5 million domains registered in Q1 2026, estimating 6.7 million were likely created for malicious purposes. Registrations fell 7.4% quarter over quarter, while malicious domains among the top five TLDs fell 3.3%.
Verizon’s DBIR found exploited vulnerabilities were the leading known initial access vector in 2025 breaches. It also reported slow patching of CISA KEV flaws and ransomware in 48% of breaches, while ransom payments declined.
Verizon's 2026 DBIR says vulnerability exploitation caused 31% of 2025 breaches, ahead of credential abuse at 13%; it also reports slower patching, more ransomware and third-party breaches, and growing AI use by attackers and employees.
A peer-reviewed study analyzed Arabic-language dark web content from July 2024 to June 2025, identifying 95 cryptocurrency addresses linked to illicit activity and highlighting differences between public and privacy coins.
BeyondTrust’s summary of the 2026 Microsoft Vulnerabilities Report says critical Microsoft vulnerabilities rose from 78 to 157 in 2025, with sharp increases in Office and Azure/Dynamics 365, and urges stronger privilege and identity controls.
Darktrace’s 2026 report says generative AI is used in 77% of security stacks, while many security professionals restrict autonomous actions or require human oversight. It also finds strong preference for MSSP-delivered SOC capabilities.
Acronis analyzed telemetry from over 1.8 million managed endpoints and found widespread use of multiple remote access tools, alongside attacker abuse of tools such as MeshAgent, Ammyy Admin and RDP.
Check Point Software’s report tracked more than 130 major Singapore cyber incidents in 2025. Ransomware accounted for 58%; government organizations led DDoS victim counts, while retail had the largest share of data breaches.
An Absolute Security survey of 750 US and UK CISOs found 57% reported ransomware starting on remote, mobile, or hybrid endpoints; 58% would consider paying, and 20% said recovery took up to two weeks.
Beazley Security Labs’ Q1 2026 report examines the TeamPCP supply-chain campaign, AI-assisted vulnerability discovery, the claimed Handala attack on Stryker, and ransomware, BEC and endpoint trends, with defensive recommendations.
AISI testing found Claude Mythos Preview and GPT-5.5 exceeding projected autonomous cyber-task growth. Palo Alto Networks also reported rapid AI-assisted vulnerability discovery, while AISI cautioned that its estimates have limitations.
April 2026 findings put Trojans at 47% and phishing at 39% of email-attachment threats; phishing rose from 21% the prior month. The report describes disguised attachments, credential-stealing pages, PDF links, and downloader malware.
JPCERT/CC’s TSUBAME sensors observed a temporary October spike in Japanese hosts sending Telnet traffic, much of it from DVR/NVR devices, and a gradual rise in packet volumes across domestic and overseas sensors.
The BKA’s 2025 report estimates €202.4 billion in cybercrime damage in Germany and records about 335,000 cases. Ransomware and DDoS increased; the report also details law-enforcement operations and growing criminal use of AI.
AhnLab’s April 2026 ransomware report uses detection data and Dedicated Leak Site disclosures to track activity, highlighting Manufacturing, Healthcare, and Finance. It cautions that a methodology change limits comparisons with data before December 2025.
Google's GTIG report documents adversaries using generative AI for vulnerability research, malware development, reconnaissance and influence operations, while detailing attacks on AI software supply chains and defensive actions.
Check Point Research tracked 2,122 ransomware victims posted across more than 70 leak sites in Q1 2026. The report describes renewed consolidation among leading groups and highlights access-driven activity, including The Gentlemen’s reported FortiGate stockpile.
Wiz data highlights widespread Jenkins exposure to critical vulnerabilities, outdated components, and risky configurations. Attackers can use exposed instances, pipelines, plugins, or agents to steal credentials and pivot into cloud environments.
Lenovo’s survey of 6,000 enterprise employees found 20–33% use AI outside IT oversight. The report links tooling and training gaps to risks including sensitive-data exposure and compliance failures, and recommends governance, in-context training and standardized tools.
Microsoft reports QR-code phishing rose 146% from January to March 2026, while CAPTCHA-gated phishing reached 11.9 million attacks in March. Tycoon2FA activity fell after disruption; BEC totaled about 10.7 million attacks in Q1.
Proofpoint’s 2026 AI and Human Risk Landscape survey of more than 1,400 security professionals in 12 countries finds AI deployment outpacing security integration, with limited confidence in controls and challenges investigating threats across collaboration channels.
