Collection of cybersecurity reports, surveys, research papers, market studies, and industry intelligence.
725 articles
Thinkst’s Q1 2026 review surveys browser deception, AI-assisted vulnerability discovery, agent compromise and cloud configuration risks. AI featured in over 33% of reviewed talks, up from 11% the previous quarter.
Genetec’s survey of 7,368 physical security professionals examines cyber risks, IT collaboration, and modernization. Among end users, 36% prioritize cybersecurity tools for 2026, while 70% report employee cybersecurity training.
Seqrite reports 265.52 million detections across more than 8 million Indian endpoints from October 2024 to September 2025. Findings highlight persistent legacy malware, ransomware campaigns, cloud identity abuse, and security-readiness gaps.
The International AI Safety Report 2026 describes AI use in phishing, fraud and cyber operations, alongside persistent safeguard weaknesses. It says autonomous attacks remain limited and evidence of real-world mitigation effectiveness is sparse.
SANS’s 2026 CTI survey finds 91% of surveyed CISOs value threat intelligence, but only 26% say it significantly influences decisions. Findings highlight resource constraints, rising AI adoption, and gaps in feedback and sharing governance.
F5 models continued API growth and examines how unmanaged endpoints, exposed credentials and webhook abuse increase security risks. The report recommends lifecycle security, unified discovery and an inter-cluster proxy approach.
OrcaRouter’s 2026 AI Threat Report synthesizes public research on prompt injection, agent data theft, poisoned tools and runaway spending, recommending scoped identities, action controls and run-level monitoring.
ESET’s H1 2026 report found over 3,000 malicious AI skills among nearly 900,000 scanned, a 108% rise in ClickFix detections and growing QR phishing. It also examines PromptSpy’s Gemini use and tools that disable endpoint defenses.
VulnCheck analyzed 181 network-edge vulnerabilities added to its KEV in 2025: 42.5% affected end-of-life or likely end-of-life devices, and only 23.7% appeared in CISA KEV. The report highlights botnet targeting and support gaps.
ProcessUnity and Ponemon Institute’s survey of 1,465 practitioners finds gaps between confidence in third-party risk assessments and reported outcomes, including frequent incidents, slow reviews, limited coverage and incomplete remediation.
Anthropic’s September 2026 report describes disrupted Claude misuse spanning espionage, credential theft, fraud and surveillance. It reports growing use of autonomous attack workflows and stolen AI credentials between December 2025 and August 2026.
A global survey of 851 professionals found 82% consider Universal ZTNA essential, but only 17% have fully implemented it. The HPE report highlights fragmented tools, excessive privileges, and inconsistent enforcement as Zero Trust challenges.
Checkmarx’s survey of 1,519 security and development professionals found 98% reported breaches linked to vulnerable applications. The report highlights knowingly shipped vulnerabilities, limited security-tool adoption and gaps in AI coding governance.
ITRC recorded 1,803 data compromises and 471.2 million victim notices in H1 2026. Its report highlights mega-breaches, rising insider wrongdoing and declining disclosure of attack methods; notices do not represent unique individuals.
Pentera’s survey of 300 U.S. security leaders found widespread enterprise AI use but limited visibility and few dedicated AI security budgets. Respondents also reported frequent unauthorized access and plans to increase security and pentesting spending.
ManageEngine’s survey of 515 identity and security professionals finds machine identities far outnumber humans, but only 12% report comprehensive automated lifecycle management. AI deployment and IAM consolidation also face execution gaps.
Rapid7 analyzed initial-access listings across five cybercrime forums, finding higher asking prices, more high-value targets and growing emphasis on privileged access. RDP, VPN and RDWeb remained common; some figures rely on broker claims.
Chainguard analyzed 2,400+ container image projects and found 18,016 vulnerability instances across 886 CVEs from March–May 2026. It reports that 97% of instances were outside the top 20 projects.
Cisco’s State of AI Security 2026 examines prompt injection, agentic threats and AI supply chain risks. Its assessment of eight open-weight models found multi-turn jailbreak success rates reaching 92.78%, reinforcing the need for layered defenses.
SecurityScorecard’s 2026 survey finds a gap between leaders’ confidence and supply-chain risk practices: many oversee less than half their vendor ecosystem, rely on periodic assessments, and take days to remediate severe issues.
Huntress reports a 277% rise in remote management tool abuse in 2025, while ClickFix represented 53.2% of observed loader activity. Its annual report highlights credential-driven intrusions and ransomware operators prioritizing stealth and data theft.
An Arkose Labs report based on a survey of 300 enterprise leaders finds gaps in agentic AI security readiness, including limited governance and difficulty attributing activity to AI agents. It also offers identity-focused recommendations.
Picus analyzed over 1.1 million malicious files and 15.5 million adversarial actions from 2025. Its Red Report 2026 finds growing emphasis on evasion and persistence, with process injection ranked first and encryption-for-impact activity declining.
Grip Security’s 2026 report finds embedded AI in every analyzed organization’s SaaS environment and risky OAuth scopes in 67%. It recommends continuous discovery and identity-aware governance to reduce data exposure.
