Collection of cybersecurity reports, surveys, research papers, market studies, and industry intelligence.
729 articles
FortiGuard's 2025 analysis says AI and automation are industrializing cybercrime, with exploitation of many critical vulnerabilities occurring within 24–48 hours. It reports 7,831 confirmed ransomware victims and urges identity-focused detection, exposure reduction and,
Wiz’s 2026 report, based on hundreds of thousands of cloud environments, finds widespread use of AI services, coding assistants, agents, and MCP servers, alongside systemic security risks and faster vulnerability discovery and exploitation.
Resilience's manufacturing insurance-claims analysis (March 2021–February 2026) attributes 90% of incurred losses to ransomware; MFA misconfigurations account for 26% and software exploits 13%. It recommends continuous MFA validation, patching, and fraud controls.
Darktrace’s 2026 survey finds widespread concern about AI-driven threats: 87% of respondents say AI increases malware sophistication, while 46% feel inadequately prepared to defend their organizations.
CTM360’s GovTrap research identifies more than 11,000 domains impersonating government services. The campaign uses localized messages and fake portals to collect personal, login, and payment data for fraud and resale.
Cisco Talos says phishing accounted for 35% of incident-response compromises in Q1 2026, overtaking external vulnerability exploitation. Reports also describe AI-personalized, rapidly changing lures and increased targeting of identities and legitimate services.
Acronis says analysis of about 960 million backup jobs from H2 2025 found elevated failure rates overnight and on Fridays, especially for full backups at 02:00. It recommends spreading schedules, timing by backup type and improving monitoring.
Cyble Research & Intelligence Labs tracked 1,675 vulnerabilities in a week; more than 205 had public PoCs and CISA added 10 to KEV. The report highlights enterprise, AI-tooling and ICS flaws, including actively exploited SharePoint.
A study of 1,000 Android apps found that fewer than one-third of privacy policies mention logging, and only four matched sensitive data observed in logs. Researchers recommend CI log audits, SDK data-flow reviews, and retention and redaction controls.
Recorded Future examines cyber operations targeting mining and seabed-regulation organizations amid critical-mineral competition, including APT15-linked activity, campaigns in Indonesia, and BianLian’s 2024 compromise of Northern Minerals.
At-Bay’s 2026 InsurSec Report analyzes more than 100,000 policy years, finding claim frequency up 7% and average severity at a record $221,000. Ransomware averaged $508,000; remote access drove most ransomware claims, while fraud and liability claims also rose.
Abnormal AI's analysis of nearly 800,000 email attacks across more than 4,600 organizations finds attackers exploiting trusted relationships and routine workflows through phishing, BEC, and VEC.
The March 2026 report says trojans made up 21% of attachment-based threats and phishing 15%, highlighting HTML/PDF credential lures, archive and document delivery of RemcosRAT and AgentTesla, and C2 use of Telegram and mail infrastructure.
Cisco Talos says phishing led Q1 2026 initial access in over a third of assessable engagements. Its report details Softr-built credential theft, a Crimson Collective Azure intrusion, declining ToolShell exploitation, and persistent MFA and logging gaps.
A survey of 1,107 Japanese firms found 507 had experienced ransomware attacks. Of 222 that paid, 139 did not recover their data; experts recommend updated security software and regular backups.
Unit 42 says its tests suggest frontier AI can identify vulnerabilities and chain exploits, with greater near-term risk to open-source software. It warns attacks could accelerate and recommends faster patching, SBOMs and hardened build systems.
GreyNoise reported that, in a 103-day study, about half of edge-device reconnaissance surges were followed by a vulnerability disclosure from the targeted vendor within three weeks; the median lead time was nine days.
A March 2026 review of Korean and global financial-sector activity describes phishing, Lazarus watering-hole exploitation of AnySign4PC, Telegram API account compromises, dark-web breach claims, ransomware, and DDoS incidents.
Acronis’s H2 2025 telemetry analysis links high backup retry counts to persistent failures, not evidence that retries cause errors. It recommends limiting retries, adding delays and alerts, and investigating recurring faults.
Google Threat Intelligence Group says data-leak-site listings naming German victims rose 92% in 2025. Organizations with fewer than 5,000 employees accounted for 96% of German ransomware leak posts; these figures track public claims, not confirmed incidents.
CYFIRMA’s assessment finds that cyber incidents, geopolitical pressure and physical disruption are converging around trade chokepoints, putting transportation and logistics operators at risk even when attackers do not compromise operational technology.
Hunt.io’s three-month analysis identified 1,252 active C2 servers across 165 Russian infrastructure providers, with activity concentrated among a few hosts and spanning botnets, malware frameworks, phishing, and intrusion campaigns.
The UK AI Security Institute found Mythos Preview led models in a simulated 32-step network attack, though it succeeded end to end in only 3 of 10 attempts. The tests do not establish whether it could breach well-defended real systems.
The article summarizes the Cloud Security Alliance’s “AI Vulnerability Storm” report, which warns that AI could compress vulnerability discovery and exploitation timelines and urges CISOs to strengthen defenses, patching, automation, and incident readiness.
