Recorded Future identified 215 actively exploited CVEs in H1 2026, up 34% year over year. Its report highlights persistent RAT activity, developer supply-chain compromises, NFC payment fraud, and AI augmenting established attack methods.
Mile2’s 2026 Global Cyberthreat Report examines major cyber risks through economic impact and governance, emphasizing identity controls, payment verification, supplier oversight and tested recovery.
KnowBe4’s April 2026 report records a 41% rise in Teams attacks and a 49% increase in calendar phishing over six months. Its telemetry also highlights growing reverse-proxy use and abuse of compromised accounts.
Proofpoint’s survey of 1,600 CISOs across 16 markets finds rising concern about AI and human risk. Reported material data loss fell to 53%, but affected organizations more frequently reported financial losses and regulatory sanctions.
BioCatch reports scams among its customers rose 35% in 2026; 90% of reported scam attempts were on mobile. The report highlights employment and investment scams and recommends behavioral signals to identify coercion and intervene before payment.
Gurucul and Cybersecurity Insiders surveyed 725 IT and security professionals: 90% reported insider incidents, 54% reported confirmed or suspected AI-related incidents, and only 20% expressed confidence in containing AI-related incidents before major damage.
At-Bay reports cyber claim frequency rose 7% in 2025, with average severity reaching $221,000. Remote access dominated ransomware entry, while rapid fraud reporting was associated with better fund recovery.
KuppingerCole’s PAM report describes a shift from account vaulting toward governing privileged actions across human, machine and AI identities, comparing vendors’ just-in-time access, secrets protection and session controls.
Cato CTRL’s annual report examines enterprise AI security using 2025 telemetry from more than 4,000 customers, highlighting prompt injection, malicious AI workflows, data exposure, and the need for stronger governance.
Guardz’s 2026 MSP threat report analyzes September 2025–February 2026 telemetry, reporting a 23% rise in session hijacking and increased abuse of remote management tools across monitored SMB environments.
Google’s 2026 forecast anticipates wider adversary use of AI, continued ransomware and data-theft extortion, attacks on virtualization and crypto, and evolving nation-state operations; it also urges stronger AI governance and layered defenses.
A survey of 1,163 cybersecurity and IT professionals found persistent cloud security challenges, including tool sprawl, talent shortages, and limited confidence in real-time threat response. The report recommends shared visibility, integration, and outcome-focused
Hiscox’s 2026 report, based on a survey of 6,800 cybersecurity decision-makers at smaller organisations, examines cyberattack rates, business impacts, AI concerns and resilience measures.
Clairfield’s March 2026 sector report reviews cybersecurity deals, valuations, investment and market performance, and 2026 security trends, including demand for cloud, identity, AI, ransomware defense and incident response.
Bridewell’s 2026 survey of 600 UK critical infrastructure security professionals found 93% reported cyber attacks in the past year, highlighting disruption, response delays, asset visibility gaps and growing AI governance concerns.
GitGuardian’s 2026 report found 28.65 million new hardcoded secrets in public GitHub commits in 2025, up 34%. Internal repositories showed greater exposure, while 64% of a cohort of credentials leaked in 2022 remained valid in January 2026.
