Intezer’s analysis of 25 million security alerts from 2025 found genuine threats among low-severity events, persistent infections despite reported mitigation, and widespread phishing abuse of trusted services.
Veracode’s 2026 software security report finds 82% of organizations carry vulnerabilities unresolved for over a year. High-risk flaws rose from 8.3% to 11.3%, while remediation half-life improved only slightly to 243 days.
Abnormal AI’s 2026 report analyzes 796,505 email attacks observed in late 2025. It finds phishing, business email compromise, and vendor fraud techniques vary with organizational size, employee workflows, and regional procurement practices.
Waterfall and ICS STRIVE recorded 57 cyber incidents with physical consequences in 2025, down from 76 in 2024. Nation-state and hacktivist incidents doubled, while limited public disclosures hindered analysis of operational impacts.
Check Point’s 2026 report says ClickFix activity rose approximately 500% in 2025, while attackers expanded voice impersonation, exploited unmonitored infrastructure and targeted AI-connected workflows.
A survey of 871 cybersecurity and IT professionals found 53% reported a web application or API breach in the past year. Confidence in securing AI-integrated applications was just 15%, with visibility and detection gaps widespread.
Cybersecurity Ventures forecasts annual global cybersecurity spending will reach $1 trillion by 2031. The report compares market estimates, discusses spending patterns and scope, and highlights growth in spending outside CISO organizations.
Trend Micro’s 2026 outlook predicts more AI-automated attacks, compromised agent workflows, session theft, and data-focused extortion. It recommends stronger identity controls, cloud visibility, secure code review, and tested recovery plans.
Splunk’s survey of 650 CISOs finds 96% oversee AI governance and risk management, while 78% rank data leakage as their top AI concern. Upskilling leads efforts to address security skills gaps.
ISACA’s 2026 survey of 1,888 professionals finds persistent cybersecurity staffing and funding shortages as AI adoption grows. Only 8% report regular AI-specific incident response exercises, while 45% identify LLM SecOps skill gaps.
IBM X-Force's 2026 report finds exploitation of public-facing applications led initial access in 2025, accounting for 40% of cases. It also documents fragmented ransomware operations and growing supply-chain and credential risks.
ReversingLabs’ 2026 supply chain security report finds malicious open-source package detections rose 73% in 2025, with npm accounting for nearly 90%. Developer secrets exposure increased 11%, while PyPI malware detections fell 43%.
Cisco’s 2026 industrial AI survey finds 40% of respondents cite cybersecurity as a leading adoption obstacle and 48% identify security or segmentation as a top networking challenge. IT/OT security collaboration remains uneven.
Gen’s H1 2026 report describes attackers exploiting trusted sessions, payment flows, developer tools and AI agents. Its telemetry recorded 114.2 million blocked fake-store attacks and a 212% rise in web-skimming blocks.
ISACA’s State of Privacy 2026 survey finds median privacy staffing fell from eight to five, half of respondents expect budget cuts, and 14% reported a privacy breach in the past year, up from 12%.
Takepoint’s 2026 survey of 302 OT and ICS professionals finds AI adoption broadening, while tested controls, formal governance and mapping of AI decisions with potential physical consequences remain limited.
WithSecure’s Salesforce threat report finds URL-based threats dominated 2025 detections, while attackers abused identities, OAuth tokens, and integrations. It also examines risks from autonomous agents and recommends stronger access and content controls.
NCC Group reports 1,073 ransomware victims in August 2026, up 12% from July. Its monthly review examines Aurora’s hypervisor encryption tactics and describes AI evaluation failures that enabled access to real-world systems.
GSMA’s 2026 telecom security report reviews 2025 threats, highlighting persistent intrusions, accessible attack tools, supply chain exposure and scams. It recommends stronger baseline controls, threat hunting and preparation for AI and quantum risks.
A Pindrop survey of 250 U.S. enterprise security leaders found 74% report deepfake attacks, while 10% have purpose-built defenses. Among organizations affected or suspecting an attack, about 25% reported costs of at least $1 million.
Hitch Partners’ survey of more than 625 security executives reports that 73% lack mature AI governance, while third-party risk is the top security priority for 43% of respondents.
Netskope reports that genAI data policy violations doubled, averaging 223 incidents per organization monthly. Its 2026 report also highlights personal cloud app exposure, persistent phishing, and malware distribution through trusted services.
A March 2021 survey of 237 US IT and cybersecurity professionals found widespread concern about remote-work security, including phishing, malware, unmanaged devices and limited visibility when workers disable VPNs.
McKinsey’s 2026 survey of about 500 organizations finds AI-trust maturity improving but governance and agentic controls lagging; respondents cite cybersecurity as a leading risk. A companion article outlines six ways to strengthen AI compliance.
