Collection of cybersecurity reports, surveys, research papers, market studies, and industry intelligence.
725 articles
Hyperproof’s survey of 1,002 respondents found reported 2025 breach rates of 50% for ad-hoc risk management versus 27% for integrated, automated approaches. Manual compliance work remains widespread despite strong AI adoption.
IBM's 2026 Cost of a Data Breach Report finds average breach costs rose 12% to $4.99 million. The study of 602 organizations reports rising AI-driven attacks, widespread AI access-control gaps and lower costs among extensive security AI users.
Recorded Future’s 2026 State of Security report describes growing state-backed pre-positioning and decentralized cybercrime in 2025. Insikt Group identified 289 new ransomware variants, while observed AI use mainly improved existing techniques.
Wallarm’s 2026 report analyzes 2025 API threats, classifying 43% of new CISA KEV entries as API-related. It identifies authentication failures, exposed interfaces, and agentic AI tooling as important sources of risk.
A Cybersecurity Insiders survey of 297 U.S. IT and security professionals found widespread difficulty measuring security posture, quantifying cyber risk, and unifying cloud and on-premises visibility.
HardenStance estimates telcos spent $441 million on consumer security software in 2025. Its annual report finds growing DNS security adoption and calls for tighter integration of endpoint, router and network protections.
Intel 471 reported over 6,800 extortion breach events in 2025, up about 63%, while access-sale claims fell 27%. Its 2026 outlook highlights supply chain compromises, ClickFix delivery and faster vulnerability exploitation.
Europol’s IOCTA 2026 describes AI-enabled fraud, increasingly concealed criminal infrastructure and fragmented ransomware operations. It reports more than 120 active ransomware brands in 2025 and growing emphasis on data-leak extortion.
Chainalysis estimates illicit crypto addresses received at least $154 billion in 2025. Its annual report details growing impersonation scams, laundering networks and ransomware payments, with sanctions-related flows driving the overall increase.
Barracuda Research’s survey of IT and security professionals at organizations with 100–2,000 employees finds widespread skills gaps, especially around AI risks and advanced identity and phishing threats, and calls for stronger human expertise and governance.
Armis surveyed 1,905 IT decision-makers: 79% said their organizations were prepared for cyberwarfare, yet 50% reported inadequate security following an attack. Skills shortages and ransomware costs compound the readiness gap.
Hiya’s 2026 survey of more than 12,000 consumers in six countries found that 31% reported receiving a deepfake voice call and 15% lost money to a phone scam in the past year; 86% said they don’t answer unknown calls.
A Zscaler and Cybersecurity Insiders survey of 822 professionals found 54% need at least a week to patch critical VPN flaws, while 60% inspect a quarter or less of encrypted VPN traffic.
Intruder’s 2026 index, based on anonymized data from 3,000 customers, finds exposed MySQL databases at 26% of organizations and remediation averaging up to 56 days for organizations with 5,000–10,000 employees.
Edgescan’s 2026 report analyzes 2025 assessments across hundreds of organizations. High or critical flaws made up 31.9% of application/API findings, while large enterprises left an average of 37% of discovered vulnerabilities unresolved.
StationX’s 2026 roundup compiles phishing data from 50+ sources, highlighting AI-generated phishing, rising voice, SMS and QR tactics, BEC losses and rapid click times. It recommends layered defenses including phishing-resistant MFA, training and automated response.
Sonatype reports identifying 454,648 malicious open-source packages in 2025. Its annual study also highlights gaps in vulnerability intelligence, persistent downloads of vulnerable dependencies, and unsafe AI-generated upgrade recommendations.
Sophos surveyed 2,158 ransomware victims across 17 countries. Email-based attacks accounted for half of reported root causes, while data encryption rose to 56%. Median ransom payments fell to $769,000, but average recovery costs reached $1.7 million.
Omada’s survey of 577 U.S. enterprise identity and security professionals finds gaps in risk reporting, integration, and AI-agent controls. Some 85% report using or piloting agentic AI, while governance practices remain uneven.
HUMAN’s 2026 benchmark report says AI-driven traffic rose 187% during 2025 and post-login compromise attempts more than quadrupled. Its customer dataset also shows rising malicious scraping, carding and fake-account activity.
SpyCloud’s report reviews 2025 identity-threat trends and forecasts more commoditized identity attacks, identity sprawl, insider and supply-chain risks, AI-enabled fraud, and evolving MFA bypasses in 2026. It includes exposure and survey findings.
HYPR’s surveys of 500 US HR leaders and 950 global security decision-makers describe gaps in hiring-fraud detection and identity-risk ownership. HR respondents said 68% of fraud was found through human instinct, not automated controls.
Kiteworks' survey of 225 leaders finds widespread AI containment gaps: 63% lack purpose binding and 60% lack kill switches. Its 2026 forecast prioritizes containment, training-data governance and third-party visibility.
The World Economic Forum’s 2026 outlook finds rising concern over AI risks, fraud and geopolitical threats. Based on 804 qualified participants across 92 countries, it also highlights uneven cyber resilience and persistent skills shortages.
