Rapid7 analyzed initial-access listings across five cybercrime forums, finding higher asking prices, more high-value targets and growing emphasis on privileged access. RDP, VPN and RDWeb remained common; some figures rely on broker claims.
Chainguard analyzed 2,400+ container image projects and found 18,016 vulnerability instances across 886 CVEs from March–May 2026. It reports that 97% of instances were outside the top 20 projects.
Cisco’s State of AI Security 2026 examines prompt injection, agentic threats and AI supply chain risks. Its assessment of eight open-weight models found multi-turn jailbreak success rates reaching 92.78%, reinforcing the need for layered defenses.
SecurityScorecard’s 2026 survey finds a gap between leaders’ confidence and supply-chain risk practices: many oversee less than half their vendor ecosystem, rely on periodic assessments, and take days to remediate severe issues.
Huntress reports a 277% rise in remote management tool abuse in 2025, while ClickFix represented 53.2% of observed loader activity. Its annual report highlights credential-driven intrusions and ransomware operators prioritizing stealth and data theft.
An Arkose Labs report based on a survey of 300 enterprise leaders finds gaps in agentic AI security readiness, including limited governance and difficulty attributing activity to AI agents. It also offers identity-focused recommendations.
Picus analyzed over 1.1 million malicious files and 15.5 million adversarial actions from 2025. Its Red Report 2026 finds growing emphasis on evasion and persistence, with process injection ranked first and encryption-for-impact activity declining.
Grip Security’s 2026 report finds embedded AI in every analyzed organization’s SaaS environment and risky OAuth scopes in 67%. It recommends continuous discovery and identity-aware governance to reduce data exposure.
Delinea’s survey of 2,001 IT decision-makers found 87% considered their identity security ready for AI automation, yet 46% reported deficient AI identity governance. Shadow AI and standing privileges compound oversight gaps.
A Prowler and Kickstand survey of 633 cybersecurity professionals found that cloud security teams face heavy workloads and limited trust in autonomous AI, while prioritizing practical help with detection, triage, and compliance.
Visa’s Spring 2026 report says scams and AI-driven deception are reshaping payment security. It reports lower token-fraud losses, nearly $1 billion in identified scam activity, and rising ransomware alongside declining ransom payments.
Black Duck’s BSIMM16 report examines software security practices at 111 organizations, finding growth in vulnerability disclosure, SBOM creation, infrastructure security automation, and just-in-time training as firms address AI and regulatory demands.
CYFIRMA’s January 2026 report compares ransomware activity, victims, industries and countries, and describes trends including browser-mediated access, brokered intrusion, persistent loaders, data theft and delayed extortion.
Sopra Steria’s 2026 report says phishing accounted for 44.4% of security incidents in its Scandinavian customer base during 2025. It highlights identity theft, supply-chain compromise, AI risks, and resilience priorities for Nordic organisations.
CYFIRMA tracked 1,046 publicly claimed ransomware victims in August 2026, up 18.2% from July. Qilin led with 150 claims. The report highlights VPN exploitation, persistent appliance implants and identity theft; victim claims remain unverified.
Unit 42's 2026 report draws on more than 750 incident response cases. Identity weaknesses featured in nearly 90% of investigations, while the fastest quartile of intrusions reached data exfiltration in 72 minutes, down from 285.
Allianz’s 2026 Risk Barometer ranks cyber incidents as the top business concern, selected by 42% of respondents. The report highlights AI-enabled threats, third-party dependencies and rising data-theft exposure in large cyber claims.
DSIT’s 2026 sector analysis estimates UK cybersecurity revenue rose 11% to £14.7 billion, while employment grew just 3%, the slowest rate since 2018. Investment in dedicated firms fell 11% to £184 million in 2025.
Sophos analyzed 661 response cases and found identity-related issues accounted for 67.32% of root causes. Attackers reached Active Directory faster, while weak MFA and missing logs continued to undermine defenses.
Kiteworks’ 2026 survey of 286 professionals found 33% reported a data sovereignty-related incident in the past year. Rates ranged from 23% in Canada to 44% in the Middle East, despite broadly similar reported awareness.
CrowdStrike’s 2026 Threat Hunting Report finds faster exploitation, doubled vishing intrusions, and growing cloud abuse. Covering July 2025–June 2026, it details how attackers exploit trusted identities and developer ecosystems.
ET-ISAC’s 2026 landscape, based on member input and workshops, identifies priority risks for European telcos, including geopolitical threats, supply-chain dependencies, AI, cloud security, regulation and quantum computing, as well as AI-enabled defense and Elisa’s power
A Netskope-supported survey of 683 cybersecurity and IT professionals conducted in early 2025 found 56% reported VPN-related attacks in the previous year. Security concerns and access-management challenges are driving interest in ZTNA.
Gallagher’s 2026 outlook forecasts cyber insurance market growth and examines ransomware, supply-chain and privacy claims, AI risks, regulation, and changing underwriting and coverage practices.
