Collection of cybersecurity reports, surveys, research papers, market studies, and industry intelligence.
725 articles
Arctic Wolf’s 2026 report, based on data from more than 11,000 organizations in over 100 countries, says agentic AI autonomously resolves 60% of investigations; AI-human collaboration handles 38%, while human-only investigations fell to 2%.
Australia’s 2025-26 report says ASD’s ACSC handled 1,524 incidents, up 20%. Extensive compromises rose despite broadly stable ransomware volume; phishing, compromised accounts and unpatched systems remained major pressures.
A March 2026 survey of 1,500 people across five countries found widespread concern about AI-generated intimate images, impersonation and online deception, alongside use of chatbots for emotional support and relationship advice.
Hornetsecurity’s 2027 survey of 400 IT and cybersecurity experts found 18% of organizations reported ransomware, down from 24%; 45% lacked confidence in their defenses. Phishing was the leading reported vector, while just 9% felt staff could reliably spot AI-generated l
NIST’s guidance outlines a phased move to post-quantum cryptography, including priority use cases, transition timelines and hybrid approaches. It says hybrid measures can reduce single-algorithm risk but add implementation complexity and should generally be temporary.
CYFIRMA’s Threat Horizon update says investigations increasingly rely on identity, cloud and infrastructure telemetry. It reports rising malware-free detections and telemetry gaps, and urges defenders to retain logs beyond default windows.
A study of 12 smart TVs found ACR-like traffic continued after opt-outs on Samsung and Vizio. Researchers collected 57 million VIDAA/Unruly viewing results from an unauthenticated MQTT broker in three hours; VIDAA added authentication, but traffic remains plaintext.
CERT-AGID’s Oct. 26 passive scan found 467 potentially vulnerable URLs among 20,117 reachable IPA-listed URLs, down from 650. It cautions that version disclosures do not confirm patch status and urges administrations to verify systems.
CYFIRMA’s 2026 report logs 20 India healthcare ransomware entries for Jan–Aug, including three pharma/biotech entries, and frequent data-exposure observations. Claims remain unverified; the report finds no evidence of a coordinated campaign targeting Indian pharma.
Hornetsecurity’s interviews with three CISOs and a broader poll describe cautious AI adoption, uneven governance and awareness, and concerns including synthetic identity fraud, data poisoning, and sensitive-data exposure.
CERT-AGID analyzed 202 malicious campaigns affecting Italy, including 162 targeting Italian entities, and shared 1,460 IoCs. Phishing centered on fines, renewals, banking and refunds; 14 malware families were observed.
New Zealand’s two-year cyber security action plan outlines 15 government initiatives, including centralized incident reporting, critical infrastructure resilience, stronger government security standards, quantum-resistant cryptography, and international partnerships.
A 2026 guide combines industry benchmarks to estimate ransomware costs, citing a $5.08 million average for mid-to-large organizations. It details ransom, response, legal, downtime, fines and insurance costs, and recommends tested backups and incident-response readiness.
FinCEN’s September 2026 alert details how digital asset investment scam centers use guarantee marketplaces, professional money launderers, and DeFi to move proceeds, and provides detection red flags for financial institutions.
NACD and ISA’s 2026 cyber-risk oversight handbook outlines six governance principles, urging boards to quantify financial exposure, standardize reporting, test incident readiness, and oversee AI, quantum and third-party risks.
The paper reviews research on how insider-risk indicators lose relevance over time and proposes exponential decay levels for risk models, while calling for further validation.
HardenStance’s MWC 2026 briefing praises Deutsche Telekom’s AI security vision, finds Telefónica’s efforts less prominent, and says Orange showed little evidence of AI risk mitigation at its booth.
An Australian-led 2026 guide details cybersecurity risks and mitigations for low Earth orbit satellite communications, covering space, ground, user, link and supply-chain security, data management, sovereignty and provider assessments.
Astra’s compilation of 160 cybersecurity statistics covers ransomware, phishing, DDoS, IoT, API and cloud security, and industry risks, with basic mitigation advice.
An August 2026 enterprise agent security guide recommends task-scoped authority, independent action controls, runtime containment and auditable telemetry to limit prompt injection, data disclosure and unauthorized effects.
Zscaler’s February 2026 report examines AI, ransomware, and IoT/OT risks to India’s digital infrastructure, recommending least-privilege access, continuous verification, data protection, and tighter third-party controls.
Cerbos’s 2026 guide outlines an authorization maturity model, arguing that agent access should preserve human-user permissions and delegation records. It recommends a 90-day program to assess authorization, pilot a central policy layer, and measure progress.
Searchlight Cyber’s 2026 article cites estimates of $74 billion in global ransomware losses and $5.08 million per affected organization, highlighting downtime, recovery, and other costs while recommending preemptive defenses.
GSMA's PQ.07 report outlines post-quantum migration for non-terrestrial networks, recommending cryptographic inventories, phased hybrid deployments and coordinated upgrades to address satellite hardware, latency and interoperability constraints.
