Collection of cybersecurity reports, surveys, research papers, market studies, and industry intelligence.
729 articles
A survey of retail security teams finds widespread AI adoption alongside concern about file-based attacks and gaps in security strategies and defenses ahead of the holiday shopping season.
A study of 190,535 messages from far-right Telegram channels found that 5% contained threats or violent content. In a sampled analysis, 93% named a target and over 41% described operational details.
Huntress’s survey of more than 500 security awareness training admins and learners found rising budgets alongside reported increases in human-error incidents and risk. The article recommends more frequent, current, interactive training.
A 2025 Deloitte survey of 36 financial entities across 28 countries found challenges with DORA documentation and ICT system segmentation. Only 8% felt fully compliant with resilience testing and ICT third-party risk requirements.
Hunt.io reports over 1,465 phishing detections targeting the energy sector, including impersonation of Chevron, ConocoPhillips, PBF Energy and Phillips 66. Attackers cloned sites to steal credentials and promote investment scams, while many domains drew few vendor dete
CloudSEK reports coordinated hacktivist attacks, phishing scams and APT campaigns targeting Indian government, finance and other sectors around Independence Day, and advises users to verify sites, enable MFA and avoid suspicious offers.
Darktrace’s review of the first half of 2025 reports 12.6 million malicious emails, recurring ClickFix campaigns, ransomware and SaaS account abuse, and exploitation of internet-facing vulnerabilities, including Cityworks before public disclosure.
A survey of 100 senior cybersecurity experts at large U.S. financial firms found 45% experienced an AI-powered cyberattack in the past year, while respondents also reported rising deepfake and vishing threats, team stress, and compliance challenges.
A Huntress survey of 542 U.S. IT professionals found malware was the most commonly reported cybercrime in respondents’ organizations, while respondents cited AI-powered social engineering as a growing concern. The article also shares risk-reduction advice.
CloudSek reports a June 2025 surge in pro-Iranian hacktivist activity against Israeli targets, while noting that many breach and impact claims were exaggerated, recycled, or unverified.
Wiz reports that a month-long scan found hundreds of validated secrets in public repositories, with AI-related secrets prominent. Common exposure patterns included notebooks and AI configuration files; the company recommends scanning and safer development practices.
Huntress compiles cybersecurity findings from industry reports and surveys, highlighting credential abuse, rising vulnerability exploitation, ransomware activity, slow remediation and security staffing shortages.
A Wiz and Gatepoint Research survey reports widespread AI use among organizations, alongside gaps in AI security expertise, AI-specific protections, and visibility into deployed services.
Talos analyzed six months of PowerShell network telemetry and found rare domains had a higher observed malicious rate, but the difference was not statistically significant. The study also highlights the need to inspect subdomains and process arguments.
Huntress's 2025 survey of more than 600 IT and security professionals reports rising identity attacks, frequent detection delays, and significant losses, while many organizations plan to expand identity protection.
Huntress’s analysis of investigated ransomware incidents found an average time-to-ransom of nearly 17 hours. Two incident examples show attackers dumping credentials, evading defenses, and moving laterally before encryption.
Wiz Research analyzed hundreds of thousands of cloud accounts and found widespread exposure risks, including sensitive data on public-facing workloads, databases lacking access controls, and vulnerable exposed containers.
A report based on 154 government IT and cybersecurity professionals finds widespread cloud migration, with data security and multi-provider complexity among agencies’ leading concerns. ICIT recommends a resilience focus on resourcing, rehearsing, recovery and response.
A Darktrace survey of more than 1,500 cybersecurity professionals found strong expectations for AI’s role in defense, despite staffing shortages, uneven confidence, and gaps in understanding AI tools.
Wiz analyzed cloud account data and found rising adoption of AI services and self-hosted models. The report also highlights security vulnerabilities and a DeepSeek database exposure, and calls for better visibility and controls.
A Huntress survey of 227 U.S. IT professionals found 90% were confident in their organization’s remote-work security. It also found gaps in MFA adoption and employee security habits, alongside recommendations for improving protections.
A Huntress survey of 517 U.S. healthcare IT professionals found phishing was the most commonly reported incident in the past year, while data breaches topped concerns and patient-care disruption was the leading perceived impact.
A survey of more than 1,500 cybersecurity professionals found rising adoption priorities for AI-powered security tools, while 56% said they do not fully understand the AI techniques in their existing security stack.
Wiz analyzed hundreds of thousands of repositories and development environments using 2024 data, reporting widespread public-repository secrets, risks from persistent self-hosted runners, and excessive GitHub App permissions.
