New Zealand’s two-year cyber security action plan outlines 15 government initiatives, including centralized incident reporting, critical infrastructure resilience, stronger government security standards, quantum-resistant cryptography, and international partnerships.
A 2026 guide combines industry benchmarks to estimate ransomware costs, citing a $5.08 million average for mid-to-large organizations. It details ransom, response, legal, downtime, fines and insurance costs, and recommends tested backups and incident-response readiness.
FinCEN’s September 2026 alert details how digital asset investment scam centers use guarantee marketplaces, professional money launderers, and DeFi to move proceeds, and provides detection red flags for financial institutions.
NACD and ISA’s 2026 cyber-risk oversight handbook outlines six governance principles, urging boards to quantify financial exposure, standardize reporting, test incident readiness, and oversee AI, quantum and third-party risks.
The paper reviews research on how insider-risk indicators lose relevance over time and proposes exponential decay levels for risk models, while calling for further validation.
HardenStance’s MWC 2026 briefing praises Deutsche Telekom’s AI security vision, finds Telefónica’s efforts less prominent, and says Orange showed little evidence of AI risk mitigation at its booth.
An Australian-led 2026 guide details cybersecurity risks and mitigations for low Earth orbit satellite communications, covering space, ground, user, link and supply-chain security, data management, sovereignty and provider assessments.
Astra’s compilation of 160 cybersecurity statistics covers ransomware, phishing, DDoS, IoT, API and cloud security, and industry risks, with basic mitigation advice.
An August 2026 enterprise agent security guide recommends task-scoped authority, independent action controls, runtime containment and auditable telemetry to limit prompt injection, data disclosure and unauthorized effects.
Zscaler’s February 2026 report examines AI, ransomware, and IoT/OT risks to India’s digital infrastructure, recommending least-privilege access, continuous verification, data protection, and tighter third-party controls.
Cerbos’s 2026 guide outlines an authorization maturity model, arguing that agent access should preserve human-user permissions and delegation records. It recommends a 90-day program to assess authorization, pilot a central policy layer, and measure progress.
Searchlight Cyber’s 2026 article cites estimates of $74 billion in global ransomware losses and $5.08 million per affected organization, highlighting downtime, recovery, and other costs while recommending preemptive defenses.
GSMA's PQ.07 report outlines post-quantum migration for non-terrestrial networks, recommending cryptographic inventories, phased hybrid deployments and coordinated upgrades to address satellite hardware, latency and interoperability constraints.
A guide recommends AWS security practices including eliminating root access keys, enforcing least privilege, isolating networks, enabling monitoring and encryption, securing storage and containers, and automating response and compliance.
FortiGuard Labs predicts cybercrime will further industrialize in 2026, with AI, automation, and specialized services speeding attacks and data monetization. It urges defenders to integrate threat intelligence, identity controls, exposure management, and response.
Robotti’s 2026 AppSec report forecasts risks from LLM applications, software supply-chain compromise, cloud-native misconfiguration and APIs, and recommends secure-by-design governance, integrated testing and automated defenses.
Cycode’s 2026 report, based on an October 2025 survey of 400 security leaders in the UK and US, finds widespread AI coding-tool use alongside limited visibility and governance, increased reported security risk, and plans to consolidate AppSec tools.
Point Wild’s Q2 2026 report analyzes malware, ransomware and supply-chain activity using internal research, detection telemetry and public sources. It highlights prevalent Trojans, credential-focused infostealers and regional and industry trends.
KPMG’s Cybersecurity Considerations 2026 outlines eight priorities, including AI agent governance, non-human identities, IT/OT security, post-quantum migration and continuous supply chain monitoring.
Cisco's 2026 wireless report surveyed 6,098 professionals across 30 markets. It found 85% of organizations experienced a wireless security incident in the past year and linked modern authentication to lower reported losses.
Straiker STAR Labs reports that 36% of successful coding-agent attacks achieved code execution and 91% of successful productivity-agent attacks caused silent exfiltration. Its 2026 study also identified vulnerabilities in 4,242 MCP servers.
Accenture’s 2026 workforce report finds a mismatch between cybersecurity skills demand and supply. Its analysis of over 550,000 job postings and profiles recommends internal development, redesigned careers and human-led AI augmentation.
Upstream analyzed 494 automotive and smart mobility cyber incidents in 2025, up 21% from 2024. Its 2026 report finds ransomware incidents doubled, backend systems dominated attack vectors, and remote attacks accounted for 92% of incidents.
Plume's 2026 research details hidden residential proxies on SuperBox devices, mapping over 60,000 Netway exit IPs and capturing 1,352 ADB attack sessions delivering CECbot, Mirai and Maskify through Popanet.
