Collection of cybersecurity reports, surveys, research papers, market studies, and industry intelligence.
725 articles
Delinea’s survey of 2,001 IT decision-makers found 87% considered their identity security ready for AI automation, yet 46% reported deficient AI identity governance. Shadow AI and standing privileges compound oversight gaps.
A Prowler and Kickstand survey of 633 cybersecurity professionals found that cloud security teams face heavy workloads and limited trust in autonomous AI, while prioritizing practical help with detection, triage, and compliance.
Visa’s Spring 2026 report says scams and AI-driven deception are reshaping payment security. It reports lower token-fraud losses, nearly $1 billion in identified scam activity, and rising ransomware alongside declining ransom payments.
Black Duck’s BSIMM16 report examines software security practices at 111 organizations, finding growth in vulnerability disclosure, SBOM creation, infrastructure security automation, and just-in-time training as firms address AI and regulatory demands.
CYFIRMA’s January 2026 report compares ransomware activity, victims, industries and countries, and describes trends including browser-mediated access, brokered intrusion, persistent loaders, data theft and delayed extortion.
Sopra Steria’s 2026 report says phishing accounted for 44.4% of security incidents in its Scandinavian customer base during 2025. It highlights identity theft, supply-chain compromise, AI risks, and resilience priorities for Nordic organisations.
CYFIRMA tracked 1,046 publicly claimed ransomware victims in August 2026, up 18.2% from July. Qilin led with 150 claims. The report highlights VPN exploitation, persistent appliance implants and identity theft; victim claims remain unverified.
Unit 42's 2026 report draws on more than 750 incident response cases. Identity weaknesses featured in nearly 90% of investigations, while the fastest quartile of intrusions reached data exfiltration in 72 minutes, down from 285.
Allianz’s 2026 Risk Barometer ranks cyber incidents as the top business concern, selected by 42% of respondents. The report highlights AI-enabled threats, third-party dependencies and rising data-theft exposure in large cyber claims.
DSIT’s 2026 sector analysis estimates UK cybersecurity revenue rose 11% to £14.7 billion, while employment grew just 3%, the slowest rate since 2018. Investment in dedicated firms fell 11% to £184 million in 2025.
Sophos analyzed 661 response cases and found identity-related issues accounted for 67.32% of root causes. Attackers reached Active Directory faster, while weak MFA and missing logs continued to undermine defenses.
Kiteworks’ 2026 survey of 286 professionals found 33% reported a data sovereignty-related incident in the past year. Rates ranged from 23% in Canada to 44% in the Middle East, despite broadly similar reported awareness.
CrowdStrike’s 2026 Threat Hunting Report finds faster exploitation, doubled vishing intrusions, and growing cloud abuse. Covering July 2025–June 2026, it details how attackers exploit trusted identities and developer ecosystems.
ET-ISAC’s 2026 landscape, based on member input and workshops, identifies priority risks for European telcos, including geopolitical threats, supply-chain dependencies, AI, cloud security, regulation and quantum computing, as well as AI-enabled defense and Elisa’s power
A Netskope-supported survey of 683 cybersecurity and IT professionals conducted in early 2025 found 56% reported VPN-related attacks in the previous year. Security concerns and access-management challenges are driving interest in ZTNA.
Gallagher’s 2026 outlook forecasts cyber insurance market growth and examines ransomware, supply-chain and privacy claims, AI risks, regulation, and changing underwriting and coverage practices.
Interisle found 8.5 million domains registered in 2025 had been blocklisted by May 2026. Its report projects malicious buyers may have acquired 20% of new gTLD registrations, highlighting bulk purchases and limited suspensions.
Cloudflare’s 2026 threat report highlights stolen sessions, SaaS integration abuse, and AI-assisted operations. It reports 47.1 million DDoS attacks observed in 2025, including a record 31.4 Tbps flood attributed to Aisuru.
Dragos's 2026 OT/ICS report identifies three new threat groups and describes adversaries mapping industrial control loops. Its 2025 findings highlight access handoffs, operational data theft, ransomware disruption, and widespread monitoring gaps.
SonicWall’s 2026 Cyber Protect Report identifies weak authentication, slow patching and excessive access as persistent SMB risks. Its 2025 telemetry shows high- and medium-severity intrusion detections rose 20.8% despite nearly flat overall intrusion volume.
Dataminr’s review of 2025 reports a 225% rise in average monthly threat actor alerts, growing identity-centric attacks and larger outlier losses. It also highlights incomplete patches and urges risk-based vulnerability prioritization.
ENISA's Threat Landscape 2026 analyses 8,257 incidents recorded in 2025. DDoS accounted for 51.3% of activity, while public administration was the most affected sector. Ransomware and third-party compromises continued to disrupt operations.
An unofficial AI-assisted whitepaper bearing CSA attribution links ungoverned AI to data leakage, supply-chain threats, and excessive agent permissions. It recommends continuous asset discovery, least-privilege access, and AI-aware monitoring.
WatchGuard’s H1 2026 report found declining network detection volumes but rising novel endpoint malware. Nearly 96% of Q2 endpoint alerts involved a single machine, while older vulnerabilities and encrypted malware delivery remained prominent.
