Interisle found 8.5 million domains registered in 2025 had been blocklisted by May 2026. Its report projects malicious buyers may have acquired 20% of new gTLD registrations, highlighting bulk purchases and limited suspensions.
Cloudflare’s 2026 threat report highlights stolen sessions, SaaS integration abuse, and AI-assisted operations. It reports 47.1 million DDoS attacks observed in 2025, including a record 31.4 Tbps flood attributed to Aisuru.
Dragos's 2026 OT/ICS report identifies three new threat groups and describes adversaries mapping industrial control loops. Its 2025 findings highlight access handoffs, operational data theft, ransomware disruption, and widespread monitoring gaps.
SonicWall’s 2026 Cyber Protect Report identifies weak authentication, slow patching and excessive access as persistent SMB risks. Its 2025 telemetry shows high- and medium-severity intrusion detections rose 20.8% despite nearly flat overall intrusion volume.
Dataminr’s review of 2025 reports a 225% rise in average monthly threat actor alerts, growing identity-centric attacks and larger outlier losses. It also highlights incomplete patches and urges risk-based vulnerability prioritization.
ENISA's Threat Landscape 2026 analyses 8,257 incidents recorded in 2025. DDoS accounted for 51.3% of activity, while public administration was the most affected sector. Ransomware and third-party compromises continued to disrupt operations.
An unofficial AI-assisted whitepaper bearing CSA attribution links ungoverned AI to data leakage, supply-chain threats, and excessive agent permissions. It recommends continuous asset discovery, least-privilege access, and AI-aware monitoring.
WatchGuard’s H1 2026 report found declining network detection volumes but rising novel endpoint malware. Nearly 96% of Q2 endpoint alerts involved a single machine, while older vulnerabilities and encrypted malware delivery remained prominent.
APWG’s Q1 2026 report counted 971,181 phishing attacks, up 13.8% from Q4 2025. Telecom was the most-targeted sector, while social media threats rose across every monitored platform; observed wire-transfer BEC attacks fell 25%.
A HYPR-commissioned survey of 950 IT security decision-makers found generative AI and agentic AI were leading identity security concerns, while passwordless adoption plateaued and identity verification remained unevenly deployed.
VikingCloud’s survey of 200 North American SMB owners and cyber leaders says cyberattacks are their leading operational risk in 2026. It reports frequent disruptions, phishing and ransomware exposure, limited vendor controls, and strained security capacity.
Forescout’s 2026 report analyzes millions of devices using telemetry from the first week of February to rank risk across IT, IoT, OT and IoMT. Routers led IT risk; financial services had the highest average risk, while Telnet exposure rose in several industries.
Cisco’s 2026 privacy study finds 90% of organizations expanded privacy programs because of AI, but only 12% describe AI governance committees as mature and proactive. Findings highlight sensitive-data risks and gaps in vendor accountability.
Flashpoint’s 2026 report cites 11.1 million infostealer-infected machines, 3.3 billion stolen credentials, 44,509 vulnerabilities and an 8,835-case ransomware total for 2025, with AI-driven threats and identity abuse among its key concerns.
Truesec reports fewer successful ransomware encryptions in the Nordics in 2025 despite rising intrusion attempts. Its annual report highlights credential abuse, software supply chain threats and the prospect of faster AI-assisted attacks.
Fluid Attacks’ report analyzes its 2025 security testing data, finding higher risk exposure across client systems, a large share of risk in high- and critical-severity flaws, and faster remediation among systems using its CI Gate.
SecurityScorecard’s 2026 study of South Korea’s 100 largest listed companies found 94% connected to breached third-party vendors, while 14% had publicly reported direct breaches. The report highlights supplier concentration and weak security ratings.
A BioCatch-commissioned survey of 100 Thai banking leaders found rising fraud concerns, operational strain, and difficulty identifying mule accounts across banks. Respondents also flagged instant payments as a significant fraud risk.
Momentum Cyber reports a record 45 cybersecurity-services M&A deals in Q1 2026 and projects 170 for the year. Its June report examines consolidation, private-equity activity and demand for AI-enabled, human-led security services.
Based on observations of 607 RSAC 2026 exhibitor booths, Duha reports that 37% mentioned AI and identifies Software Security, Identity, and Security Operations as crowded vendor spaces.
GRF’s 2026 risk report identifies cybersecurity and resilience as major concerns for DC-area organizations, citing social engineering and system weaknesses while recommending stronger AI governance, vendor reviews, and security assessments.
PDI says it analyzed more than 4 trillion security events. Its report describes rising exploit activity and ransomware, increased firewall targeting, and a post-enforcement drop in dark-web market activity as new infostealers filled the gap.
Akamai’s 2026 report says average daily API attacks rose 113% in 2025, while Layer 7 DDoS attacks increased 61%. Its telemetry shows a shift toward API workflow abuse, underscoring the need for integrated application security and multilayer defenses.
Veeam’s survey of 900+ security leaders found that confidence in cyber recovery often exceeds reported outcomes: ransomware-affected organizations frequently failed to recover all data, while many respondents cited gaps in AI risk visibility and governance.
