Infoblox’s 2026 threat report says over 22% of 120 million newly registered domains showed threat characteristics. Its DNS analysis highlights short-lived infrastructure, industrialized fraud services, and expanding enterprise exposure.
TRM estimates illicit crypto flows reached $158 billion in 2025, up from $64.5 billion in 2024, while their share of attributed on-chain volume fell to 1.2%. The report cites sanctions-linked flows, hacks and faster attribution, and introduces revised metrics.
Red Canary’s 2026 report analyzes 110,000 confirmed threats detected in 2025. Identity threats accounted for 53% of detection volume, while AI misuse, paste-and-run lures, and remote management tool abuse featured prominently.
Bridewell’s 2026 regulatory guide outlines global cybersecurity and privacy changes, highlighting NIS2 implementation, breach reporting, third-party risk oversight and tighter cross-border data transfer controls.
A survey of 297 cybersecurity professionals found that while 82% knew of MITRE ATT&CK, only 8% used it regularly and 84% lacked thorough mapping to the framework.
A LastPass report combining anonymized platform telemetry with a June 2026 survey and interviews finds widespread AI use with limited governance, alongside password reuse and unmanaged SaaS sprawl that raise data-exposure and compliance concerns.
Arctic Wolf’s 2026 report analyzes incident-response cases from Nov. 2024 to Nov. 2025, finding ransomware, BEC and data incidents made up 92% of cases, while remote access abuse drove 65% of non-BEC cases.
Kibu’s Q1 2026 report examines alleged North Korean IT-worker schemes using fabricated identities to gain remote jobs, access company systems, and divert earnings. It highlights hiring identity verification as a defense and promotes Kibu’s own product.
A 2026 statistical guide synthesizes 2024–2025 data on cybercrime losses, phishing, ransomware, breach costs and identity attacks, distinguishing measured results from forecasts and outlining risk-planning implications.
Hyperproof’s survey of 1,002 respondents found reported 2025 breach rates of 50% for ad-hoc risk management versus 27% for integrated, automated approaches. Manual compliance work remains widespread despite strong AI adoption.
IBM's 2026 Cost of a Data Breach Report finds average breach costs rose 12% to $4.99 million. The study of 602 organizations reports rising AI-driven attacks, widespread AI access-control gaps and lower costs among extensive security AI users.
Recorded Future’s 2026 State of Security report describes growing state-backed pre-positioning and decentralized cybercrime in 2025. Insikt Group identified 289 new ransomware variants, while observed AI use mainly improved existing techniques.
Wallarm’s 2026 report analyzes 2025 API threats, classifying 43% of new CISA KEV entries as API-related. It identifies authentication failures, exposed interfaces, and agentic AI tooling as important sources of risk.
A Cybersecurity Insiders survey of 297 U.S. IT and security professionals found widespread difficulty measuring security posture, quantifying cyber risk, and unifying cloud and on-premises visibility.
HardenStance estimates telcos spent $441 million on consumer security software in 2025. Its annual report finds growing DNS security adoption and calls for tighter integration of endpoint, router and network protections.
Intel 471 reported over 6,800 extortion breach events in 2025, up about 63%, while access-sale claims fell 27%. Its 2026 outlook highlights supply chain compromises, ClickFix delivery and faster vulnerability exploitation.
Europol’s IOCTA 2026 describes AI-enabled fraud, increasingly concealed criminal infrastructure and fragmented ransomware operations. It reports more than 120 active ransomware brands in 2025 and growing emphasis on data-leak extortion.
Chainalysis estimates illicit crypto addresses received at least $154 billion in 2025. Its annual report details growing impersonation scams, laundering networks and ransomware payments, with sanctions-related flows driving the overall increase.
Armis surveyed 1,905 IT decision-makers: 79% said their organizations were prepared for cyberwarfare, yet 50% reported inadequate security following an attack. Skills shortages and ransomware costs compound the readiness gap.
Hiya’s 2026 survey of more than 12,000 consumers in six countries found that 31% reported receiving a deepfake voice call and 15% lost money to a phone scam in the past year; 86% said they don’t answer unknown calls.
A Zscaler and Cybersecurity Insiders survey of 822 professionals found 54% need at least a week to patch critical VPN flaws, while 60% inspect a quarter or less of encrypted VPN traffic.
Intruder’s 2026 index, based on anonymized data from 3,000 customers, finds exposed MySQL databases at 26% of organizations and remediation averaging up to 56 days for organizations with 5,000–10,000 employees.
Edgescan’s 2026 report analyzes 2025 assessments across hundreds of organizations. High or critical flaws made up 31.9% of application/API findings, while large enterprises left an average of 37% of discovered vulnerabilities unresolved.
StationX’s 2026 roundup compiles phishing data from 50+ sources, highlighting AI-generated phishing, rising voice, SMS and QR tactics, BEC losses and rapid click times. It recommends layered defenses including phishing-resistant MFA, training and automated response.
