Collection of cybersecurity reports, surveys, research papers, market studies, and industry intelligence.
725 articles
A Cybersecurity Insiders survey of 1,064 enterprise security professionals found widespread data-protection gaps: only 8% reported consistent enforcement in AI environments, and 9% could reliably recognize modified sensitive data.
Cofense’s 2026 report describes 2025 phishing trends, including more malware delivery, adaptive and polymorphic campaigns, AI-assisted business email compromise, increased abuse of remote access tools, and growth in credential phishing using .es domains.
Cobalt’s 2026 pentesting report finds high-risk remediation half-lives ranging from 10 to 249 days. AI/LLM findings were rated high risk nearly 2.7 times as often as findings overall, while only 38% of high-risk AI findings were resolved.
CrowdStrike’s 2026 Global Threat Report says average eCrime breakout time fell to 29 minutes in 2025. Attacks by AI-enabled adversaries rose 89%, while threat actors increasingly abused trusted identities, cloud services, and unmanaged systems.
Proofpoint’s survey of 1,453 security professionals found 42% reported suspected or confirmed AI-related incidents, while only 33% felt fully prepared to investigate them. The report highlights gaps in controls and cross-channel visibility.
Salt’s 1H 2026 survey of over 300 security leaders finds gaps in API visibility and agent monitoring, while its customer-data analysis says 99% of attack attempts came from authenticated sources and 65% targeted API misconfiguration.
A Synack-commissioned, Omdia-conducted survey of 200 U.S. security professionals finds broad interest in agentic AI pentesting, but organizations report limited attack-surface coverage and favor human oversight, accuracy, and guardrails.
Symantec and Carbon Black report 6,182 claimed extortion attacks in 2025, up 23% when encryptionless attacks are included. The study examines ransomware affiliate migration, Warlock’s possible espionage links, and widespread abuse of legitimate tools.
Mimecast’s survey of 2,500 security and IT decision-makers across nine countries reports gaps in human-risk defenses, including limited use of training and continuous monitoring, and concerns about insider risk and AI-driven attacks.
SpyCloud’s 2026 survey of 750 security professionals found 68% of organizations reported an identity-based event in the past year. Non-human identity misuse led reported event types, while visibility, governance, and remediation gaps remained common.
An Akamai-commissioned survey of 640 cybersecurity decision-makers in China, India, Japan and Singapore found 81% of organizations experienced API security incidents in the past year, amid poor inventory visibility and growing AI-linked API risks.
The 2026 SANS SOC Survey finds 79% of respondents use AI/ML, but only 36% integrate it into defined workflows. Findings also highlight staffing misalignment, limited OT/IoT monitoring, and threat intelligence rarely informing investment.
Zscaler’s 2026 report analyzes 989.3 billion AI/ML transactions from 2025, finding rising data transfers and extensive blocked disclosures. Red-team testing across more than 25 enterprise environments found critical flaws in every AI system tested.
Filigran’s survey of 550 security professionals found 84% say attacks exploit known but unprioritized risks, while 97% struggle to validate exploitability. The report highlights fragmented visibility and manual exposure-management workflows.
Apono’s survey of 250 cybersecurity professionals found only 21% felt prepared for agentic AI attacks, while 98% reported security-related deployment delays or added reviews. Just 2% had experienced or observed incidents involving AI agents.
Health-ISAC tracked 455 health-sector ransomware events in 2025. Its annual report highlights growing third-party risks, social engineering, legacy medical-device exposure, and AI-enabled attacks as respondents' leading concern for 2026.
CyberProof’s 2026 threat report reviews 2025 intrusions, highlighting identity abuse, SaaS integration compromise, rapid enterprise vulnerability exploitation, and operational disruption. It recommends stronger help-desk verification and OAuth controls.
NetDiligence analyzed 10,309 cyber claims from 2021–2025. Ransomware and business email compromise accounted for nearly 64% of SME claims of at least $1,000 in 2025, while large companies represented 56% of total incident costs.
Sysdig’s 2026 report analyzes anonymized customer telemetry and Falco usage data from 2025, highlighting cloud-native security trends: AI package growth, persistent vulnerable workloads, increased behavior-based detection and automated response, and identity risks.
Hornetsecurity’s 2026 report draws on over 72 billion processed emails, finding malware emails rose 131% in 2025. It also reports increased ransomware victimization and warns of AI governance gaps and identity threats.
Snyk’s 2026 survey report says misconfigurations and unpatched vulnerabilities were leading cloud-native incident drivers. Organizations with more deployment automation were more likely to test security frequently and fix vulnerabilities faster.
Toc Consulting’s 2026 AWS security whitepaper examines identity misconfigurations, S3 ransomware, and agentic AI risks, with practical controls, audit checklists, and a 90-day hardening roadmap.
NETSCOUT recorded over 9.1 million DDoS attacks in 1H 2026. Attacks exceeding 1Tbps or 1Gpps rose 1,286% year over year, while direct-path methods and residential proxy sources complicated selective mitigation.
Orange Cyberdefense’s 2026 report presents incident, response-time, vulnerability-scanning and SMB detection data, alongside trends in hacktivism, cyber extortion and digital sovereignty.
