Collection of cybersecurity reports, surveys, research papers, market studies, and industry intelligence.
725 articles
A guide recommends AWS security practices including eliminating root access keys, enforcing least privilege, isolating networks, enabling monitoring and encryption, securing storage and containers, and automating response and compliance.
Cyble scanned over 1.3 million newly registered domains and found private credentials exposed in public code on 35 of 22,306 identified AI-built sites, including OpenAI, Stripe, Slack, and database credentials.
Insikt Group says reported attacks on Japanese organizations rose 48%, from 621 to 918, in Q3 2026. The report describes data exposure and service disruption, discusses possible contributing factors, and recommends stronger patching, API controls and account protections
Rapid7 reports that high-severity flaws were exploited within three days on average in Q3 2026, while ransomware remained dominant. AI appeared in 8% of tracked incidents, with humans still directing targets and objectives.
Rapid7’s Q3 2026 report says newly disclosed high- and critical-severity vulnerabilities were exploited in three days on average. It also highlights unauthenticated vulnerabilities, operational AI use in attacks, and posts selling RDP or network access.
FortiGuard Labs predicts cybercrime will further industrialize in 2026, with AI, automation, and specialized services speeding attacks and data monetization. It urges defenders to integrate threat intelligence, identity controls, exposure management, and response.
Robotti’s 2026 AppSec report forecasts risks from LLM applications, software supply-chain compromise, cloud-native misconfiguration and APIs, and recommends secure-by-design governance, integrated testing and automated defenses.
Cycode’s 2026 report, based on an October 2025 survey of 400 security leaders in the UK and US, finds widespread AI coding-tool use alongside limited visibility and governance, increased reported security risk, and plans to consolidate AppSec tools.
Point Wild’s Q2 2026 report analyzes malware, ransomware and supply-chain activity using internal research, detection telemetry and public sources. It highlights prevalent Trojans, credential-focused infostealers and regional and industry trends.
KPMG’s Cybersecurity Considerations 2026 outlines eight priorities, including AI agent governance, non-human identities, IT/OT security, post-quantum migration and continuous supply chain monitoring.
Cisco's 2026 wireless report surveyed 6,098 professionals across 30 markets. It found 85% of organizations experienced a wireless security incident in the past year and linked modern authentication to lower reported losses.
Straiker STAR Labs reports that 36% of successful coding-agent attacks achieved code execution and 91% of successful productivity-agent attacks caused silent exfiltration. Its 2026 study also identified vulnerabilities in 4,242 MCP servers.
Accenture’s 2026 workforce report finds a mismatch between cybersecurity skills demand and supply. Its analysis of over 550,000 job postings and profiles recommends internal development, redesigned careers and human-led AI augmentation.
Upstream analyzed 494 automotive and smart mobility cyber incidents in 2025, up 21% from 2024. Its 2026 report finds ransomware incidents doubled, backend systems dominated attack vectors, and remote attacks accounted for 92% of incidents.
Plume's 2026 research details hidden residential proxies on SuperBox devices, mapping over 60,000 Netway exit IPs and capturing 1,352 ADB attack sessions delivering CECbot, Mirai and Maskify through Popanet.
Infoblox’s 2026 threat report says over 22% of 120 million newly registered domains showed threat characteristics. Its DNS analysis highlights short-lived infrastructure, industrialized fraud services, and expanding enterprise exposure.
TRM estimates illicit crypto flows reached $158 billion in 2025, up from $64.5 billion in 2024, while their share of attributed on-chain volume fell to 1.2%. The report cites sanctions-linked flows, hacks and faster attribution, and introduces revised metrics.
Red Canary’s 2026 report analyzes 110,000 confirmed threats detected in 2025. Identity threats accounted for 53% of detection volume, while AI misuse, paste-and-run lures, and remote management tool abuse featured prominently.
Bridewell’s 2026 regulatory guide outlines global cybersecurity and privacy changes, highlighting NIS2 implementation, breach reporting, third-party risk oversight and tighter cross-border data transfer controls.
A survey of 297 cybersecurity professionals found that while 82% knew of MITRE ATT&CK, only 8% used it regularly and 84% lacked thorough mapping to the framework.
A LastPass report combining anonymized platform telemetry with a June 2026 survey and interviews finds widespread AI use with limited governance, alongside password reuse and unmanaged SaaS sprawl that raise data-exposure and compliance concerns.
Arctic Wolf’s 2026 report analyzes incident-response cases from Nov. 2024 to Nov. 2025, finding ransomware, BEC and data incidents made up 92% of cases, while remote access abuse drove 65% of non-BEC cases.
Kibu’s Q1 2026 report examines alleged North Korean IT-worker schemes using fabricated identities to gain remote jobs, access company systems, and divert earnings. It highlights hiring identity verification as a defense and promotes Kibu’s own product.
A 2026 statistical guide synthesizes 2024–2025 data on cybercrime losses, phishing, ransomware, breach costs and identity attacks, distinguishing measured results from forecasts and outlining risk-planning implications.
