Collection of cybersecurity reports, surveys, research papers, market studies, and industry intelligence.
725 articles
APWG’s Q1 2026 report counted 971,181 phishing attacks, up 13.8% from Q4 2025. Telecom was the most-targeted sector, while social media threats rose across every monitored platform; observed wire-transfer BEC attacks fell 25%.
A HYPR-commissioned survey of 950 IT security decision-makers found generative AI and agentic AI were leading identity security concerns, while passwordless adoption plateaued and identity verification remained unevenly deployed.
VikingCloud’s survey of 200 North American SMB owners and cyber leaders says cyberattacks are their leading operational risk in 2026. It reports frequent disruptions, phishing and ransomware exposure, limited vendor controls, and strained security capacity.
Forescout’s 2026 report analyzes millions of devices using telemetry from the first week of February to rank risk across IT, IoT, OT and IoMT. Routers led IT risk; financial services had the highest average risk, while Telnet exposure rose in several industries.
Cisco’s 2026 privacy study finds 90% of organizations expanded privacy programs because of AI, but only 12% describe AI governance committees as mature and proactive. Findings highlight sensitive-data risks and gaps in vendor accountability.
Flashpoint’s 2026 report cites 11.1 million infostealer-infected machines, 3.3 billion stolen credentials, 44,509 vulnerabilities and an 8,835-case ransomware total for 2025, with AI-driven threats and identity abuse among its key concerns.
Truesec reports fewer successful ransomware encryptions in the Nordics in 2025 despite rising intrusion attempts. Its annual report highlights credential abuse, software supply chain threats and the prospect of faster AI-assisted attacks.
Fluid Attacks’ report analyzes its 2025 security testing data, finding higher risk exposure across client systems, a large share of risk in high- and critical-severity flaws, and faster remediation among systems using its CI Gate.
SecurityScorecard’s 2026 study of South Korea’s 100 largest listed companies found 94% connected to breached third-party vendors, while 14% had publicly reported direct breaches. The report highlights supplier concentration and weak security ratings.
A BioCatch-commissioned survey of 100 Thai banking leaders found rising fraud concerns, operational strain, and difficulty identifying mule accounts across banks. Respondents also flagged instant payments as a significant fraud risk.
Momentum Cyber reports a record 45 cybersecurity-services M&A deals in Q1 2026 and projects 170 for the year. Its June report examines consolidation, private-equity activity and demand for AI-enabled, human-led security services.
Based on observations of 607 RSAC 2026 exhibitor booths, Duha reports that 37% mentioned AI and identifies Software Security, Identity, and Security Operations as crowded vendor spaces.
GRF’s 2026 risk report identifies cybersecurity and resilience as major concerns for DC-area organizations, citing social engineering and system weaknesses while recommending stronger AI governance, vendor reviews, and security assessments.
PDI says it analyzed more than 4 trillion security events. Its report describes rising exploit activity and ransomware, increased firewall targeting, and a post-enforcement drop in dark-web market activity as new infostealers filled the gap.
Akamai’s 2026 report says average daily API attacks rose 113% in 2025, while Layer 7 DDoS attacks increased 61%. Its telemetry shows a shift toward API workflow abuse, underscoring the need for integrated application security and multilayer defenses.
Veeam’s survey of 900+ security leaders found that confidence in cyber recovery often exceeds reported outcomes: ransomware-affected organizations frequently failed to recover all data, while many respondents cited gaps in AI risk visibility and governance.
Nozomi Networks’ H2 2025 report links 26.5% of observed alerts to adversary-in-the-middle techniques. It also finds widespread wireless protection gaps and high or critical severity in 48% of observed 2025 vulnerabilities.
The 2026 report examines AI-enabled workforce impersonation across deepfakes, helpdesk social engineering, MFA bypass, phishing, DPRK IT worker fraud and AI agents, and recommends phishing-resistant MFA and identity checks at high-risk points.
HiddenLayer’s 2026 report examines AI supply chain threats, prompt injection and agent abuse. Its survey reports widespread shadow AI, inconsistent model scanning and limited AI-specific incident response and red teaming.
BioCatch’s 2026 report, based on data from 36 Latin American financial institutions, says social-engineering scams rose 155% in 2025. It also reports increases in account takeover, malware, and remote-access fraud, with activity shifting toward mobile.
Sophos reports that AI is accelerating familiar attack techniques and defensive investigations while exposing enterprise credentials and developer tools. Its 2026 report highlights STAC6994’s agent-assisted malware development and gaps in AI governance.
Kaspersky’s 2026 report finds public-facing application exploits accounted for 43.7% of investigated initial access vectors in 2025. It also highlights trusted-relationship compromises and gaps in SOC detection coverage.
Citizen Lab identified two surveillance campaigns abusing telecom signalling and operator infrastructure for location tracking. Historical telemetry traces activity to 2022; one blocked attempt used a SIMjacker SMS to request location data.
Fortra's July 2026 BEC report found attack volume fell 12% month over month, while gift cards accounted for 50.2% of cash-out methods. It also documented cryptocurrency scams, wire-transfer requests, and attacker infrastructure trends.
