Collection of cybersecurity reports, surveys, research papers, market studies, and industry intelligence.
729 articles
Huntress says its analysis of thousands of organizations and millions of endpoints in 2024 found widespread RAT use, rising infostealer and script activity, and ransomware shifts toward data theft and extortion.
DarkOwl’s 2024 roundup describes active ransomware groups, major attacks and rising activity, including 31 new groups and a record 574 attacks reported in December.
A 2024 cybersecurity retrospective reviews ransomware, AI-enabled scams, critical infrastructure and cloud breaches, supply-chain attacks, and workforce shortages, and highlights stronger controls, monitoring, partnerships, and training as priorities.
Team Cymru’s survey of 293 security practitioners found 49% experienced a major breach in the prior 12 months; among them, 72% said threat hunting helped prevent or mitigate it. Respondents also cited tools, training and retention as key program factors.
A survey of 293 security practitioners found that respondents credit threat-hunting tools, trained analysts and baseline data with improving programs. The article also recommends better visibility, automation, asset inventories and log retention.
An MSPCFO analysis of 62 MSPs using Huntress and 129 not using it found 26.4% less time per 100 endpoints on identified tickets at Huntress MSPs, based on median sample values.
A survey of 293 security practitioners found that 53% considered their threat hunting programs very effective in 2024, up from 41% in 2023. Respondents highlighted proactive detection, third-party monitoring, actionable intelligence, funding and data gaps, and staffing.
Team Cymru’s 2024 survey of 293 security practitioners found that 49% reported a major breach in the prior year, while respondents cited funding, historical data and staffing as threat-hunting challenges and prioritized third-party monitoring.
Darktrace’s first-half 2024 findings highlight persistent MaaS malware, double extortion by ransomware groups, and widespread phishing, including QR-code attacks.
DarkOwl’s 2023 roundup describes reported ransomware trends, including rising extortion and data theft, intermittent encryption, attacks on healthcare and defense, and groups returning after disruptions. Estimates and actor claims remain uncertain.
Wiz analyzed compensation data from more than 3,500 companies, finding that finance leads pay for cloud security engineers while retail leads for senior and executive CISOs.
Wiz’s analysis of hundreds of thousands of cloud accounts found widespread use of AI services and tools, including managed AI services in over 70% of organizations. The report recommends improving visibility and security ownership as adoption grows.
Huntress’ Q3 2023 report, based on 2.4 million endpoints and over 1 million Microsoft 365 user entities, highlights malware-free intrusions, RMM abuse, malicious inbox rules, and diverse ransomware affecting SMBs.
Based on scans of more than 200,000 cloud accounts, Wiz’s 2023 report finds low Kubernetes security maturity, identifies risks across attack paths, and recommends layered controls to reduce exposure and limit attacker movement.
DarkOwl’s 2023 overview describes rising ransomware profits, expanding multi-extortion, data theft, stealthier encryption practices and increasingly organized groups, while warning that broader attack surfaces may sustain activity.
DarkOwl’s year-over-year analysis found more exposed credentials in its darknet dataset, including a rise in plain-text passwords. It also found common weak patterns and password reuse among 45% of matched work and personal accounts.
A webinar presenting GitGuardian’s 2022 report says it found 10 million secrets in public GitHub repositories, up about 67% year over year. Speakers discuss how exposed credentials are used and ways to prevent and remediate leaks.
Analysts categorized 1,407 emails sent to addresses sourced from darknet combolists. Sales spam was most common; phone scams and “I hacked you” emails increased. The article says every email attachment in the sample contained malware.
A survey of 250+ mid-sized businesses in the US and Canada found gaps in incident response, cybersecurity staffing and employee training; nearly one-quarter reported a cyber attack or were unaware of one.
DarkOwl found exposed credentials and account-sale listings for five e-learning services. Its data included plaintext passwords and stealer logs, though the article says the findings do not establish the value or validity of every account.
DarkOwl’s year-in-review describes cyber campaigns, hacktivism, ransomware, ICS targeting and increased Telegram use linked to the Ukraine war, while noting uncertainty around some group claims and alleged weapons listings.
DarkOwl describes darknet activity targeting gamers and streaming users, including account sales, credential stuffing, malicious links, scams, malware, and recruitment. It reports nearly 100,000 documents advertising credential lists in the past year.
DarkOwl reports 813 ransomware victim announcements across 25 tracked groups since February 24, 2022, with activity rebounding in April and claims involving critical infrastructure. It also describes new groups and REvil’s brief return.
Talos reports ransomware was its most commonly observed threat in Q3 2021, followed by record levels of business email compromise. Local government was the most targeted sector, and MFA and logging gaps hindered security and incident response.
