Nozomi Networks’ H2 2025 report links 26.5% of observed alerts to adversary-in-the-middle techniques. It also finds widespread wireless protection gaps and high or critical severity in 48% of observed 2025 vulnerabilities.
The 2026 report examines AI-enabled workforce impersonation across deepfakes, helpdesk social engineering, MFA bypass, phishing, DPRK IT worker fraud and AI agents, and recommends phishing-resistant MFA and identity checks at high-risk points.
HiddenLayer’s 2026 report examines AI supply chain threats, prompt injection and agent abuse. Its survey reports widespread shadow AI, inconsistent model scanning and limited AI-specific incident response and red teaming.
BioCatch’s 2026 report, based on data from 36 Latin American financial institutions, says social-engineering scams rose 155% in 2025. It also reports increases in account takeover, malware, and remote-access fraud, with activity shifting toward mobile.
Sophos reports that AI is accelerating familiar attack techniques and defensive investigations while exposing enterprise credentials and developer tools. Its 2026 report highlights STAC6994’s agent-assisted malware development and gaps in AI governance.
Kaspersky’s 2026 report finds public-facing application exploits accounted for 43.7% of investigated initial access vectors in 2025. It also highlights trusted-relationship compromises and gaps in SOC detection coverage.
Citizen Lab identified two surveillance campaigns abusing telecom signalling and operator infrastructure for location tracking. Historical telemetry traces activity to 2022; one blocked attempt used a SIMjacker SMS to request location data.
Fortra's July 2026 BEC report found attack volume fell 12% month over month, while gift cards accounted for 50.2% of cash-out methods. It also documented cryptocurrency scams, wire-transfer requests, and attacker infrastructure trends.
A Cybersecurity Insiders survey of 1,064 enterprise security professionals found widespread data-protection gaps: only 8% reported consistent enforcement in AI environments, and 9% could reliably recognize modified sensitive data.
Cofense’s 2026 report describes 2025 phishing trends, including more malware delivery, adaptive and polymorphic campaigns, AI-assisted business email compromise, increased abuse of remote access tools, and growth in credential phishing using .es domains.
Cobalt’s 2026 pentesting report finds high-risk remediation half-lives ranging from 10 to 249 days. AI/LLM findings were rated high risk nearly 2.7 times as often as findings overall, while only 38% of high-risk AI findings were resolved.
CrowdStrike’s 2026 Global Threat Report says average eCrime breakout time fell to 29 minutes in 2025. Attacks by AI-enabled adversaries rose 89%, while threat actors increasingly abused trusted identities, cloud services, and unmanaged systems.
Proofpoint’s survey of 1,453 security professionals found 42% reported suspected or confirmed AI-related incidents, while only 33% felt fully prepared to investigate them. The report highlights gaps in controls and cross-channel visibility.
Salt’s 1H 2026 survey of over 300 security leaders finds gaps in API visibility and agent monitoring, while its customer-data analysis says 99% of attack attempts came from authenticated sources and 65% targeted API misconfiguration.
A Synack-commissioned, Omdia-conducted survey of 200 U.S. security professionals finds broad interest in agentic AI pentesting, but organizations report limited attack-surface coverage and favor human oversight, accuracy, and guardrails.
Symantec and Carbon Black report 6,182 claimed extortion attacks in 2025, up 23% when encryptionless attacks are included. The study examines ransomware affiliate migration, Warlock’s possible espionage links, and widespread abuse of legitimate tools.
Mimecast’s survey of 2,500 security and IT decision-makers across nine countries reports gaps in human-risk defenses, including limited use of training and continuous monitoring, and concerns about insider risk and AI-driven attacks.
SpyCloud’s 2026 survey of 750 security professionals found 68% of organizations reported an identity-based event in the past year. Non-human identity misuse led reported event types, while visibility, governance, and remediation gaps remained common.
An Akamai-commissioned survey of 640 cybersecurity decision-makers in China, India, Japan and Singapore found 81% of organizations experienced API security incidents in the past year, amid poor inventory visibility and growing AI-linked API risks.
The 2026 SANS SOC Survey finds 79% of respondents use AI/ML, but only 36% integrate it into defined workflows. Findings also highlight staffing misalignment, limited OT/IoT monitoring, and threat intelligence rarely informing investment.
Zscaler’s 2026 report analyzes 989.3 billion AI/ML transactions from 2025, finding rising data transfers and extensive blocked disclosures. Red-team testing across more than 25 enterprise environments found critical flaws in every AI system tested.
Filigran’s survey of 550 security professionals found 84% say attacks exploit known but unprioritized risks, while 97% struggle to validate exploitability. The report highlights fragmented visibility and manual exposure-management workflows.
Apono’s survey of 250 cybersecurity professionals found only 21% felt prepared for agentic AI attacks, while 98% reported security-related deployment delays or added reviews. Just 2% had experienced or observed incidents involving AI agents.
Health-ISAC tracked 455 health-sector ransomware events in 2025. Its annual report highlights growing third-party risks, social engineering, legacy medical-device exposure, and AI-enabled attacks as respondents' leading concern for 2026.
