Suggest edit — annual-security-reports

Title

Name

Note

---
visibility: public
---

# Annual Security Reports

**repo:** [jacobdjwilson/awesome-annual-security-reports](https://github.com/jacobdjwilson/awesome-annual-security-reports)  
**category:** [[security|Security]]

---

# Awesome Annual Security Reports [![Awesome](https://awesome.re/badge-flat2.svg)](https://awesome.re)
![Awesome Annual Security Reports Logo](.github/images/awesome-security-reports-logo.png)
> A curated list of annual cyber security reports - Centralized annual cybersecurity analysis and industry surveys

**Definition:** The cybersecurity landscape is constantly evolving, making it hard for CIOs, CISOs, and security leaders to keep up. They're flooded with annual reports from research consultancies, industry working groups, non-profits, and government agencies, and sifting through marketing material to find actionable insights is a major challenge. This list aims to cut through the noise by providing a vendor-neutral resource for the latest security trends, tools, and partnerships. It curates information from trusted sources, making it easier for security leaders to make informed decisions.

**Disclaimer:** The reports in this collection are limited to content which does not require a paid subscription, membership, or service contract. There are a variety of different business models and drivers that would cause information to be put behind a paywall, I would like to respect those companies and individuals. Consult the original authors for licensing of any report content.

**Limitations:** This is **not** a repository for project-specific documents such as white papers, intelligence reports, technical specifications, or standards. While all user-submitted uploads or report requests are welcome, we should draw a box around this _awesome_ list.

**Accessibility:** When possible, all reports will be sourced from their original authors and uploaded to [Virus Total](https://virustotal.com/) via GitHub action to provide an added level of confidence. The resulting analysis link will be included in the PDF commit notes. Additionally, all PDF reports will be converted to Markdown using AI, based on the [AI Prompts](/.github/ai-prompts) defined in this repository.

**Acknowledgement:** I would like to give recognition for other works that inspired this collection. [Richard Stiennon](https://www.linkedin.com/in/stiennon) produces an annual comprehensive cybersecurity industry analysis at [IT Harvest](https://dashboard.it-harvest.com/) that deserves attention of those in the industry. Additionally, [Rick Howard](https://www.linkedin.com/in/rickhoward/)'s [Cyber Cannon](https://cybercanon.org/) list of must-read books is a timeless resource of curated wisdom, catering to both leadership and practitioner levels within the field.

**Annual Report Counts:** \

## Contents

- [Overview](#overview)
- [How to Contribute](#how-to-contribute)
- [Analysis Reports](#analysis-reports)
    - [Global Threat Intelligence](#global-threat-intelligence)
    - [Regional Assessments](#regional-assessments)
    - [Sector Specific Intelligence](#sector-specific-intelligence)
    - [Application Security](#application-security)
    - [Cloud Security](#cloud-security)
    - [Vulnerabilities](#vulnerabilities)
    - [Ransomware](#ransomware)
    - [Data Breaches](#data-breaches)
    - [Physical Security](#physical-security)
    - [AI and Emerging Technologies](#ai-and-emerging-technologies)
- [Survey Reports](#survey-reports)
    - [Industry Trends](#industry-trends)
    - [Executive Perspectives](#executive-perspectives)
    - [Workforce and Culture](#workforce-and-culture)
    - [Market and Investment Research](#market-and-investment-research)
    - [Application Security](#application-[security](/@harrisonqian/awesome/wiki/security/security)-1)
    - [Cloud Security](#cloud-[security](/@harrisonqian/awesome/wiki/security/security)-1)
    - [Identity Security](#identity-security)
    - [Penetration Testing](#penetration-testing)
    - [Privacy and Data Protection](#privacy-and-data-protection)
    - [Ransomware](#ransomware-1)
    - [AI and Emerging Technologies](#ai-and-emerging-technologies-1)
- [Resources](#resources)
    - [Research Consulting](#research-consulting)
    - [Standards and Certifications](#[standards](/@harrisonqian/awesome/wiki/miscellaneous/standards)-and-certifications)
    - [Threat Intelligence and Incident Response](#threat-intelligence-and-incident-response)
    - [Policy and Advocacy](#policy-and-advocacy)
    - [Working Groups](#working-groups)
    - [Government and Non-profits](#government-and-non-profits)

## Overview

Reports are organized into two main categories based on their data sources:

> **Analysis:** Generated through quantification and qualification of data from sensor networks or cybersecurity services.

> **Survey:** Derived from surveys, interviews, or consulting engagements that capture industry sentiment and practices.

The most recent versions of reports are listed below. Older editions are preserved in their corresponding yearly directories. Reports from sources that have not been updated in the last three years will no longer appear in this `README.md` but will remain accessible in the respective year's directory.

Reports are organized by their primary focus. Although many reports span multiple topics, this classification provides a clearer structure. Within each topic, reports are listed alphabetically.

## How to Contribute

The easiest way to contribute is to suggest a report. If you've found a valuable annual security report that isn't on our list, please let us know!

## Analysis Reports

### Global Threat Intelligence
- [Artic Wolf Labs](https://arcticwolf.com/arctic-wolf-labs-2025-cybersecurity-predictions/) - [Cybersecurity Predictions](Annual%20Security%20Reports/2025/ArticWolfLabs-Cybersecurity-Predictions-2025.pdf) (2025) - Analyzes evolving threat landscapes and predicts key cybersecurity challenges for 2025. The report highlights the increasing sophistication of social engineering attacks, emphasizing the critical need for robust multi-factor authentication implementations and vigilance against evolving tactics, techniques, and procedures.
- [Artic Wolf Labs](https://github.com/jacobdjwilson/awesome-annual-[security](/@harrisonqian/awesome/wiki/security/security)-reports) - [Threat Report](Annual%20Security%20Reports/2026/ArticWolfLabs-Threat-Report-2026.pdf) (2026) - Analyzes the evolving cybersecurity threat landscape by examining [incident response](/@harrisonqian/awesome/wiki/security/incident-response) data from global digital forensics engagements to identify critical trends in ransomware, business email compromise, and data exfiltration. Key findings reveal that 92 percent of incidents are driven by three primary attack vectors, while 65 percent of non-business email compromise cases stem from the abuse of external remote access products, highlighting a significant shift toward exploiting low-complexity entry points over sophisticated technical exploits.
- [Astra](https://www.getastra.com/blog/security-audit/cyber-[security](/@harrisonqian/awesome/wiki/security/security)-statistics/) - [Cybersecurity Statistics Report](Annual%20Security%20Reports/2026/Astra-Cybersecurity-Statistics-Report-2026.pdf) (2026) - Analyzes the evolving cybersecurity landscape and the prevalence of diverse threat vectors including ransomware, malware, and social engineering tactics. Key findings reveal that cyberattacks occur every 39 seconds with an average of 2,200 daily incidents, while ransomware remains a critical concern as it served as the primary motive for 72 percent of [security](/@harrisonqian/awesome/wiki/security/security) incidents in 2023.
- [Axur](https://www.axur.com/en-us/threat-landscape-report) - [Threat Landscape](Annual%20Security%20Reports/2025/Axur-Threat-Landscape-2025.pdf) (2025) - Analyzes the 2025 cybersecurity threat landscape, focusing on evolving attack vectors and their impact on organizations. Key insights reveal a significant increase in supply chain attacks, a shift in social engineering tactics targeting IT professionals, and the growing sophistication of ransomware through triple extortion methods.
- [Biocatch](https://www.biocatch.com/report-2025-digital-banking-fraud-trends-in-the-united-states) - [Digital Banking Fraud Trends In The United States](Annual%20Security%20Reports/2025/BioCatch-Digital-Banking-Fraud-Trends-in-the-United-States-2025.pdf) (2025) - Analyzes digital banking fraud trends in the U.S., highlighting the evolving threat landscape and emerging methods employed by fraudsters. The report reveals a surge in money mule activity 168% increase and the increasing use of stablecoins like Tether for laundering illicit proceeds, while also noting a reduction in fraud during account onboarding.
- [Bitdefender](https://www.bitdefender.com) - [IoT [Security](/@harrisonqian/awesome/wiki/security/security) Report](Annual%20Security%20Reports/2025/Bitdefender-IoT-Security-Report-2025.pdf) (2025) - Examines the evolving [Internet of Things](/@harrisonqian/awesome/wiki/hardware/internet-of-things) threat landscape by analyzing data from over 58 million devices across global smart homes. Key findings reveal that [streaming](/@harrisonqian/awesome/wiki/big-data/streaming) devices and smart televisions account for over 47 percent of all detected vulnerabilities, while the rise of massive router botnets enabled a record-breaking 22.2 terabit per second distributed denial of service attack in 2025.
- [Bridewell](https://www.bridewell.com/insights/white-papers/detail/cyber-threat-intelligence-report-2025) - [Cyber Threat Intelligence Report](Annual%20Security%20Reports/2025/Bridewell-Cyber-Threat-Intelligence-Report-2025.pdf) (2025) - Analyzes the cyber threat landscape of 2025, focusing on malicious infrastructure tracking and emerging threats. The report highlights a decrease in Cobalt Strike usage alongside a rise in Sliver and Brute Ratel, with Lumma Stealer, Redline Stealer, and StealC dominating the information stealer landscape, pularly impacting the UK.
- [Cato Networks](https://www.catonetworks.com) - [Threat Report](Annual%20Security%20Reports/2026/CatoNetworks-Threat-Report-2026.pdf) (2026) - Examines the evolving threat landscape of 2026 by focusing on the [integration](/@harrisonqian/awesome/wiki/platforms/integration) of advanced automation and decentralized network architectures within modern enterprise environments. Telemetry data collected throughout the year reveals that threat actors are increasingly utilizing [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) to exploit misconfigurations in cloud native infrastructure, leading to a 34 percent increase in successful zero day attacks against edge computing nodes compared to previous annual cycles.
- [Chainalysis](https://www.chainalysis.com) - [Crypto Crime Report](Annual%20Security%20Reports/2026/Chainalysis-Crypto-Crime-Report-2026.pdf) (2026) - Analyzes the 2026 landscape of illicit cryptocurrency activity, focusing on the professionalization of laundering networks and the escalation of nation-state sanctions evasion. Findings reveal that illicit addresses received 154 billion dollars in 2025, representing a 162 percent year-over-year increase, while stablecoins now account for 84 percent of all illicit transaction volume.
- [Check Point](https://blog.checkpoint.com/executive-insights/the-2026-tech-tsunami-ai-quantum-and-web-4-0-collide/) - [Cybersecurity Report](Annual%20Security%20Reports/2026/CheckPoint-Cybersecurity-Report-2026.pdf) (2026) - Examines the evolving threat landscape in 2025, focusing on the [integration](/@harrisonqian/awesome/wiki/platforms/integration) of [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence), multi-channel social engineering, and the transformation of ransomware into a data-driven extortion economy. Key findings reveal that ClickFix social engineering activity increased by approximately 500 percent compared to the previous year, while the ransomware group Qilin emerged as a dominant threat actor by publishing the identities of over 1,000 victims on its data leak site.
- [Checkpoint](https://research.checkpoint.com/2026/cyber-[security](/@harrisonqian/awesome/wiki/security/security)-report-2026/) - [Cyber Security Report](Annual%20Security%20Reports/2026/Checkpoint-Cyber-Security-Report-2026.pdf) (2026) - Analyzes the evolving 2025 threat landscape, focusing on the [integration](/@harrisonqian/awesome/wiki/platforms/integration) of [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence), multi-channel social engineering, and the expansion of ransomware operations. Key findings reveal a 53 percent year-over-year increase in ransomware victims, totaling over 7,960 incidents, alongside a 500 percent surge in ClickFix social engineering activity that now appears in nearly half of all documented malware campaigns.
- [Cisco](https://umbrella.cisco.com/info/cyber-threat-trends-report) - [Cyber Threats Trends Report](Annual%20Security%20Reports/2025/Cisco-Cyber-Threats-Trends-Report-2025.pdf) (2025) - Analyzes current cyber threat trends, focusing on information stealers, Trojans, ransomware, RATs, and APTs. Key findings reveal a significant increase in the sophistication and volume of attacks, particularly concerning the use of information stealers and the continued evolution of ransomware techniques.
- [Cloudflare](https://blog.[cloudflare](/@harrisonqian/awesome/wiki/platforms/cloudflare).com/2026-threat-report/) - [Threat Report](Annual%20Security%20Reports/2026/Cloudflare-Threat-Report-2026.pdf) (2026) - Investigates the evolving threat landscape of 2026, focusing on the industrialization of cyber attacks and the shift toward high-trust exploitation within modern cloud and identity ecosystems. Key findings reveal that adversaries are leveraging automated tools to achieve a record-breaking 31.4 Tbps baseline for [hyper](/@harrisonqian/awesome/wiki/development-environment/hyper)-volumetric distributed denial of service strikes, while simultaneously utilizing deepfake personas and session token theft to bypass traditional [security](/@harrisonqian/awesome/wiki/security/security) perimeters and infiltrate trusted organizational networks.
- [Coalition](https://web.coalitioninc.com/webinar-2026-Cyber-Claims-Report-2026-03-05.html) - [Cyber Claims Report](Annual%20Security%20Reports/2026/Coalition-Cyber-Claims-Report-2026.pdf) (2026) - Analyzes the global cyber risk landscape and the effectiveness of proactive risk management strategies using proprietary claims data from over one hundred thousand policyholders. Key findings reveal that while global claims frequency rose by 3 percent, the average financial severity decreased by 19 percent to 116,000 dollars, even as ransomware demands surged by 47 percent to an average exceeding 1 million dollars per incident.
- [Crowd Strike](https://ir.crowdstrike.com/news-releases/news-release-details/2026-crowdstrike-global-threat-report-ai-accelerates-adversaries) - [Global Threat Report](Annual%20Security%20Reports/2026/CrowdStrike-Global-Threat-Report-2026.pdf) (2026) - Analyzes [security](/@harrisonqian/awesome/wiki/security/security) findings and threat trends reported by CrowdStrike for 2026, examining key attack patterns, vulnerability data, and defensive recommendations drawn from data collected across hundreds of security practitioners. Findings span 10 or more priority risk areas, providing actionable guidance for organizations seeking to strengthen their security posture.
- [Crowd Strike](https://www.crowdstrike.com/resources/reports/overwatch-threat-hunting-report/) - [Threat Hunting Report](Annual%20Security%20Reports/2025/CrowdStrike-Threat-Hunting-Report-2025.pdf) (2025) - Examines the evolving landscape of interactive cyber intrusions and the proactive threat hunting strategies required to counter advanced adversaries. Key findings reveal a 136% surge in cloud intrusions, the increasing use of [generative AI](/@harrisonqian/awesome/wiki/computer-science/generative-ai) by threat actors, and a dramatic rise in vishing attacks.
- [Cyber Proof](https://www.cyberproof.com/cyber-threat-intelligence/cyberproof-2025-mid-year-cyber-threat-landscape-report/) - [Mid Year Cyber Threat Landscape](Annual%20Security%20Reports/2025/CyberProof-Mid-Year-Cyber-Threat-Landscape-2025.pdf) (2025) - Analyzes the H1 2025 cyber threat landscape, focusing on the surge of AI-powered ransomware operations, intensified targeting of the manufacturing sector, and strategic shifts in supply chain infiltration. Key insights include a 60% increase in ransomware attacks, the emergence of GenAI-leveraging groups like FunkSec, and high-impact infrastructure compromises by China-aligned APTs such as Salt Typhoon.
- [CyberProof](https://www.cyberproof.com/blog/cyberproof-2026-global-threat-intelligence-report/) - [Global Threat Intelligence Report](Annual%20Security%20Reports/2026/CyberProof-Global-Threat-Intelligence-Report-2026.pdf) (2026) - Investigates the evolving landscape of global cyber threats in 2025, focusing on the rapid weaponization of vulnerabilities and the strategic shift toward identity abuse within business-critical systems. Key findings reveal that ransomware activity in the manufacturing sector surged by 61 percent compared to the previous year, while identity, cloud, and software as a service platforms accounted for approximately 22 percent of all recorded [security](/@harrisonqian/awesome/wiki/security/security) incidents.
- [Cyble](https://cyble.com/resources/research-reports/global-threat-landscape-report-h1-2025/) - [Global Threat Landscape](Annual%20Security%20Reports/2025/Cyble-Global-Threat-Landscape-2025.pdf) (2025) - Analyzes the global threat landscape of H1 2025, highlighting a significant 54% increase in ransomware attacks compared to the previous year. The report identifies CL0P, Akira, and Qilin as the top ransomware operators, with North America being the most targeted region and zero-day exploits in Microsoft and Apple products posing significant risks.
- [Dataminr](https://resources.dataminr.com/dataminr-for-cyber-defense/dataminr-2026-cyber-threat-landscape-report) - [Cyber Threat Landscape Report](Annual%20Security%20Reports/2026/Dataminr-Cyber-Threat-Landscape-Report-2026.pdf) (2026) - Analyzes the evolving 2025 cyber threat landscape by examining the surge in sophisticated threat actor activity, systemic vulnerability re-exploitation, and the critical need for context-aware risk prioritization. Key findings reveal a 225 percent increase in monthly threat actor alerts alongside over 18,000 recorded instances of ransomware activity, highlighting a persistent trend where technical severity scores often fail to capture the true business impact of emerging digital risks.
- [Deep Instinct](https://info.deepinstinct.com/2025_cyber_threat_landscape_report) - [Threat Landscape Report](Annual%20Security%20Reports/2025/DeepInstinct-Cyber-Threat-Landscape-Report-2025.pdf) (2025) - Analyzes global malware trends and ransomware attacks in 2024, offering predictions for 2025. Key findings highlight a continued rise in ransomware attacks targeting specific sectors, coupled with the evolving tactics of ransomware groups and the impact of sanctions and disclosures on their operations.
- [Deloitte](https://www.deloitte.com/us/en/services/consulting/articles/cybersecurity-report-2025.html) - [Global Cyber Threat Intelligence Report](Annual%20Security%20Reports/2025/Deloitte-Global-Cyber-Threat-Intelligence-Report-2025.pdf) (2025) - Analyzes global cyber threat trends throughout 2024, focusing on the evolution of ransomware, nation-state espionage, and shifting initial access techniques. Key findings include the continued dominance of ransomware driven by the emergence of new RaaS groups like RansomHub, and a marked shift toward AI-enhanced social engineering as threat actors adapt to bypass increasingly effective technical controls.
- [Department of Homeland Security](https://www.dhs.gov/publication/homeland-threat-assessment) - [Threat Assessment](Annual%20Security%20Reports/2025/DHS-Threat-Assessment-2025.pdf) (2025) - Analyzes homeland [security](/@harrisonqian/awesome/wiki/security/security) threats in 2025, focusing on terrorism, transnational crime, and threats to critical infrastructure. Key concerns include the evolving tactics of nation-state actors, the persistent threat of cyberattacks targeting critical infrastructure, and the increasing challenges posed by transnational criminal organizations.
- [DigiCert](https://www.digicert.com/campaigns/digicert-ultraddos-2025-biannual-report) - [Ultraddos Biannual Report](Annual%20Security%20Reports/2025/Digicert-Ultraddos-Biannual-Report-2025.pdf) (2025) - Analyzes the landscape of distributed denial of service attacks during the first half of 2025, documenting a significant shift in threat actor behavior and infrastructure capacity. Key findings reveal an 84.37 percent decrease in total attack volume compared to the previous year, while high bandwidth mega attacks exceeding 100 gigabits per second declined by more than 94 percent as adversaries recalibrated their tactics following global law enforcement operations.
- [DNS Filter](https://www.dnsfilter.com) - [Annual [Security](/@harrisonqian/awesome/wiki/security/security) Report](Annual%20Security%20Reports/2026/DNSFilter-Annual-Security-Report-2026.pdf) (2026) - Analyzes the evolving landscape of DNS layer security and threat activity, documenting the increasing volume and sophistication of malicious traffic across global networks. Key findings reveal that threat activity grew by more than 30 percent over the past year, while the average user now encounters 66 threats per day, representing a significant escalation in daily risk compared to previous reporting periods.
- [Eset](https://www.eset.com/us/business/threat-report/) - [Threat Report](Annual%20Security%20Reports/2025/Eset-Threat-Report-2025.pdf) (2025) - Focuses on the disruption of two prominent infostealers, Lumma Stealer and Danabot, through coordinated efforts. ESET's telemetry data reveals a 21% increase in Lumma Stealer detections in H1 2025, with a significant spike following a spam email campaign targeting Mexico, highlighting the malware's prolific nature and the importance of the disruption.
- [Europool](https://www.europol.europa.eu/publications-events/main-reports/iocta-report) - [Internet Organized Crime Threat Assessment](Annual%20Security%20Reports/2025/Europool-Internet-Organized-Crime-Threat-Assessment-2025.pdf) (2025) - Focuses on how cybercriminals acquire, trade, and exploit data, highlighting the ecosystem surrounding these activities. The report finds that data theft is a significant threat, with Initial Access Brokers increasingly selling access to compromised systems and accounts on specialized criminal platforms, and that social engineering techniques are becoming more effective with the adoption of AI.
- [Expel](https://www.expel.com) - [Annual Threat Report](Annual%20Security%20Reports/2026/Expel-Annual-Threat-Report-2026.pdf) (2026) - Investigates the evolving threat landscape across identity, endpoint, and cloud infrastructure to provide actionable insights for organizational defense strategies. Findings reveal that identity-based attacks remain the primary threat vector, accounting for 68.6 percent of all incidents, while custom [detection engineering](/@harrisonqian/awesome/wiki/security/detection-engineering) enables a mean time to respond of just 13 minutes for high and critical severity events.
- [F5](https://www.f5.com/labs/articles/2025-advanced-persistent-[bots](/@harrisonqian/awesome/wiki/miscellaneous/bots)-report) - [Advanced Persistent Bots Report](Annual%20Security%20Reports/2025/F5-Advanced-Persistent-Bots-Report-2025.pdf) (2025) - Examines the behavior of advanced persistent bots across 200 billion transactions, assessing the impact of mitigation on web and mobile API platforms. Analysis reveals that while overall automated attacks declined in most sectors, the Hospitality industry faced a significant increase, with nearly 45% of all web traffic originating from unauthorized scraping bots.
- [Flashpoint](https://flashpoint.io/resources/report/flashpoint-global-threat-intelligence-report-2026/) - [Global Threat Intelligence Report](Annual%20Security%20Reports/2026/Flashpoint-Threat-Intel-Report-2026.pdf) (2026) - Analyzes the evolving global threat landscape, focusing on the convergence of [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence), identity exploitation, and automated attack [frameworks](/@harrisonqian/awesome/wiki/front-end-development/frameworks). Key findings reveal a 1,500 percent surge in illicit AI discussions alongside the compromise of 3.3 billion credentials, while ransomware activity increased by 53 percent as adversaries shifted tactics to exploit human trust and identity vulnerabilities.
- [Forescout](https://www.forescout.com/press-releases/forescout-2025h1-threat-review-highlights-surge-in-zero-day-exploits-nation-backed-hacktivism-and-[healthcare](/@harrisonqian/awesome/wiki/health-and-social-science/healthcare)-vulnerabilities/) - [Threat Review](Annual%20Security%20Reports/2025/Forescout-Threat-Review-2025.pdf) (2025) - Analyzes the threat landscape of the first half of 2025, emphasizing the persistence of known vulnerabilities and the blurring distinction between hacktivist and state-sponsored actors. Key insights highlight that 47% of newly exploited vulnerabilities were pre-existing, while adversaries increasingly utilized unexpected assets like IP cameras and BSD systems to evade detection and facilitate lateral movement.
- [Fortinet](https://www.fortinet.com/blog/threat-research/key-takeaways-from-the-2025-global-threat-landscape-report) - [Global Threat Report](Annual%20Security%20Reports/2025/Fortinet-Global-Threat-Report-2025.pdf) (2025) - Analyzes the evolving global threat landscape and attacker tactics. Key findings reveal a surge in cyber reconnaissance activity driven by automated scanning and a significant shift in attacker focus towards cloud environments and post-exploitation techniques.
- [Gen Digital](https://www.gendigital.com/blog/insights/reports/threat-report-q3-2025) - [Threat Report](Annual%20Security%20Reports/2025/GenDigital-Threat-Report-2025.pdf) (2025) - Highlights the rise of PharmaFraud, AI-built ransomware, and tech support scams targeting Facebook users. The report reveals a surge in financial scams +340% and malicious push notifications +317%, alongside the discovery of a cryptographic flaw in the FunkSec ransomware, leading to a free decryptor.
- [Guardz](https://guardz.com/blog/small-business-cyberattacks-rise-in-2025-guardz-mid-year-findings/) - [SMB Threat Report](Annual%20Security%20Reports/2025/Guardz-SMB-Threat-Report-2025.pdf) (2025) - Analyzes the SMB threat landscape, highlighting the rise of phishing, cloud-based attacks, and identity-based breaches. The report reveals a shift towards AI-enhanced social engineering, stolen credentials as a primary attack vector, and the increasing exploitation of cloud assets and Microsoft 365 applications.
- [Honeywell](https://www.honeywell.com/us/en/reports/2025/honeywell-cyber-threat-report) - [Cyber Threat Report](Annual%20Security%20Reports/2025/Honeywell-Cyber-Threat-Report-2025.pdf) (2025) - Focuses on cybersecurity incidents impacting operational technology environments and the increasing cybersecurity and non-compliance risks faced by companies. Key findings include a 46% increase in ransomware extortion incidents, the emergence of the CL0P ransomware group as a dominant actor, and an increase in attacks targeting [agriculture](/@harrisonqian/awesome/wiki/miscellaneous/agriculture) and [food](/@harrisonqian/awesome/wiki/miscellaneous/food) production.
- [Huntress](https://www.huntress.com/resources/2025-cyber-threat-report) - [Threat Report](Annual%20Security%20Reports/2025/Huntress-Threat-Report-2025.pdf) (2025) - Analyzes the 2024 cyber threat landscape, focusing on ransomware attacks and their impact across various sectors. Key findings reveal a concerning increase in ransomware attacks targeting [healthcare](/@harrisonqian/awesome/wiki/health-and-social-science/healthcare) and technology sectors, with a notable rise in the use of Remote Monitoring and Management tools for lateral movement.
- [IBM](https://www.ibm.com) - [X Force Threat Intelligence Index](Annual%20Security%20Reports/2026/IBM-X-Force-Threat-Intelligence-Index-2026.pdf) (2026) - Investigates the evolving threat landscape of 2025 by analyzing [incident response](/@harrisonqian/awesome/wiki/security/incident-response) data and vulnerability trends across global software and cloud ecosystems. Key findings reveal a 44 percent increase in the exploitation of public-facing applications as an initial access vector, while 56 percent of disclosed vulnerabilities required no authentication for successful exploitation, highlighting critical gaps in foundational [security](/@harrisonqian/awesome/wiki/security/security) hygiene.
- [Infoblox](https://www.infoblox.com/resources/report/infoblox-2025-dns-threat-landscape-report/) - [DNS Threat Landscape Report](Annual%20Security%20Reports/2025/Infoblox-DNS-Threat-Landscape-Report-2025.pdf) (2025) - Analyzes the DNS threat landscape, highlighting the increasing sophistication and speed of DNS-sourced cyberattacks. The report reveals that threat actors are rapidly deploying weaponized domains, leveraging traffic distribution systems, and exploiting vulnerabilities in WordPress and cloud resources to evade detection and target victims with scams, malware, and phishing attacks.
- [K7 Security](https://www.k7computing.com/us/threat-reports) - [Cyber Threat Monitor Report](Annual%20Security%20Reports/2025/K7Security-Cyber-Threat-Monitor-Report-2025.pdf) (2025) - Analyzes the global cyber threat landscape and its impact on various industries, highlighting evolving attack vectors and prevalent malware. Key findings indicate a significant rise in human-centric phishing attacks and the persistent exploitation of unpatched [Windows](/@harrisonqian/awesome/wiki/platforms/windows) vulnerabilities, particularly MS17-010.
- [Kroll](https://www.kroll.com/en/reports/cyber/threat-intelligence-reports/threat-landscape-report-lens-on-crypto) - [Threat Landscape Report](Annual%20Security%20Reports/2025/Kroll-Threat-Landscape-Report-2025.pdf) (2025) - Analyzes the evolving threat landscape in the cryptocurrency era, detailing emerging cybercrime tactics and regulatory responses. Key findings reveal a significant surge in crypto-related theft, reaching $1.93 billion in the first half of 2025, and a 40% increase in phishing attacks targeting crypto users.
- [Mandiant](https://blog.google/innovation-and-ai/infrastructure-and-cloud/google-cloud/m-trends-2026-report-cybersecurity/) - [M Trends](Annual%20Security%20Reports/2026/Mandiant-M-Trends-2026.pdf) (2026) - Investigates the evolving global threat landscape through an analysis of over 500,000 hours of frontline [incident response](/@harrisonqian/awesome/wiki/security/incident-response) engagements conducted throughout 2025. Key findings reveal that global median dwell time has increased to 14 days, while threat actors are increasingly prioritizing recovery denial by systematically targeting backup infrastructure and identity services to force ransom payments.
- [Microsoft](https://www.microsoft.com/en-us/corporate-responsibility/cybersecurity/microsoft-digital-defense-report-2025/) - [Digital Defense Report](Annual%20Security%20Reports/2025/Microsoft-Digital-Defense-Report-2025.pdf) (2025) - Focuses on the evolving cybersecurity threat landscape, highlighting the increasing role of AI in both attacks and defenses. Key findings reveal adversaries are leveraging AI for social engineering and vulnerability discovery, while defenders are using it to synthesize data and detect novel threats.
- [Mile2](https://mile2.com/2026-global-cyberthreat-report/) - [Global Cyberthreat Report](Annual%20Security%20Reports/2026/Mile2-Global-Cyberthreat-Report-2026.pdf) (2026) - Identifies a landscape where cyber risk has transitioned from a technical IT problem to a systemic economic force. The report emphasizes that in 2026, cyber resilience is a test of executive governance and decision-making discipline under pressure.
- [Mimecast](https://www.mimecast.com/resources/ebooks/threat-intelligence-january-june-2025/) - [Global Threat Intelligence Report](Annual%20Security%20Reports/2025/Mimecast-Global-Threat-Intelligence-Report-2025.pdf) (2025) - Analyzes the global threat landscape, focusing on risks posed by business communications, collaboration environments, and human workers. Key findings reveal a surge in ClickFix attacks, the weaponization of legitimate services, and the increasing use of multi-channel attack strategies, highlighting the need for enhanced [security](/@harrisonqian/awesome/wiki/security/security) hygiene and user awareness.
- [NC Tech](https://www.nctech.org/_files/_pdf/talent/NC%20Tech%20State%20of%20the%20Technology%20Industry%20Report%202025.pdf) - [State Of Cybersecurity](Annual%20Security%20Reports/2025/NCTech-State-of-Cybersecurity-2025.pdf) (2025) - Analyzes the evolving landscape of cybersecurity threats and challenges for 2025, detailing emerging attack vectors and defense strategies. Key insights reveal a significant increase in AI-driven attacks, the growing sophistication of ransomware-as-a-service models, and the persistent cyber skills gap as major concerns.
- [Orange Cyber Defense](https://www.orangecyberdefense.com/global/security-navigator) - [Security Navigator](Annual%20Security%20Reports/2026/OrangeCyberDefense-[Security](/@harrisonqian/awesome/wiki/security/security)-Navigator-2026.pdf) (2026) - Evaluates the landscape of global cybersecurity threats and [incident response](/@harrisonqian/awesome/wiki/security/incident-response) performance through extensive data collected from managed security operations. Findings reveal that 13.7 percent of potential incidents are confirmed as true positives, with 40.6 percent of these cases resolved within one hour of detection.
- [Palo Alto](https://www.paloaltonetworks.com/blog/2026/02/unit-42-global-ir-report/) - [Global [Incident Response](/@harrisonqian/awesome/wiki/security/incident-response) Report](Annual%20Security%20Reports/2026/PaloAlto-Global-Incident-Response-Report-2026.pdf) (2026) - Analyzes [security](/@harrisonqian/awesome/wiki/security/security) findings and threat trends reported by PaloAlto for 2026, examining key attack patterns, vulnerability data, and defensive recommendations drawn from data collected across hundreds of security practitioners. Findings span 10 or more priority risk areas, providing actionable guidance for organizations seeking to strengthen their security posture.
- [Picus](https://www.picussecurity.com/red-report) - [Red Report](Annual%20Security%20Reports/2026/Picus-Red-Report-2026.pdf) (2026) - Analyzes the evolution of global adversary tradecraft by mapping over 15.5 million malicious actions to the MITRE ATT&CK framework. Findings reveal a strategic shift toward long-lived persistence, as 80% of the top ten techniques now prioritize evasion while 38% of observed attacks show a decline in encryption for impact in favor of stealthy identity theft and process injection.
- [Rapid7](https://www.rapid7.com/lp/initial-access-brokers-report/) - [Initial Access Brokers Report](Annual%20Security%20Reports/2025/Rapid7-Initial-Access-Brokers-Report-2025.pdf) (2025) - Focuses on the Initial Access Broker landscape by analyzing activity on Exploit, XSS, and BreachForums. The analysis reveals that most access broker sales include a level of privilege, with VPN and Domain User access being the most popular vectors, and the average base price for access ranging from $500 to $1,000.
- [RecordedFuture](https://www.recordedfuture.com) - [State of Security](Annual%20Security%20Reports/2026/RecordedFuture-State-of-[Security](/@harrisonqian/awesome/wiki/security/security)-2026.pdf) (2026) - Analyzes the global threat landscape in 2025, focusing on how geopolitical fragmentation and the erosion of diplomatic norms have accelerated cyber espionage and hybrid conflict. Key findings reveal a 33% increase in new ransomware variants compared to the previous year, alongside a strategic shift toward persistent pre-positioning in critical infrastructure and the [integration](/@harrisonqian/awesome/wiki/platforms/integration) of [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) into existing cybercriminal workflows.
- [Red Canary](https://redcanary.com/threat-detection-report) - [Threat Detection Report](Annual%20Security%20Reports/2026/RedCanary-Threat-Detection-Report-2026.pdf) (2026) - Analyzes the evolving cybersecurity landscape by examining over one hundred thousand confirmed threats across diverse infrastructure and identity environments. Key findings reveal that identity based attacks surged by 850 percent year over year, now accounting for 53 percent of total detection volume as adversaries increasingly prioritize credential compromise to access cloud and software as a service platforms.
- [Relia Quest](https://www.reliaquest.com/resources/research-reports/annual-threat-report-2025/) - [Annual Threat Report](Annual%20Security%20Reports/2025/ReliaQuest-Annual-Threat-Report-2025.pdf) (2025) - Analyzes 2024 cyber-threat trends, focusing on initial access tactics and their effectiveness. Key findings reveal inadequate logging as the root cause of most breaches, with session hijacking bypassing multi-factor authentication in all successful business email compromise incidents.
- [Resilience](https://unlock.cyberresilience.com/2025midyear_risk_report) - [Cyber Risk Report](Annual%20Security%20Reports/2025/Resilience-Cyber-Risk-Report-2025.pdf) (2025) - Analyzes cyber risk trends based on claims experience and threat intelligence, highlighting the evolution of third-party risk and the impact of vendor-related incidents. Key findings include a surge in social engineering effectiveness due to AI, an increase in the severity of ransomware attacks, and the compounding effects of ecosystem risks.
- [Shieldworkz](https://shieldworkz.com/2025-ot-ics-iot-cybersecurity-threat-landscape-report) - [Global OT And IoT Threat Landscape Report](Annual%20Security%20Reports/2025/Shieldworkz-Global-OT-and-IoT-Threat-Landscape-Report-2025.pdf) (2025) - Analyzes the global OT and IoT threat landscape, highlighting the increasing sophistication and strategic intent of cyberattacks targeting critical infrastructure.
- [SilentPush](https://www.silentpush.com/white-[papers](/@harrisonqian/awesome/wiki/computer-science/papers)-and-reports/threat-actor-study/) - [Threat Actor Study](Annual%20Security%20Reports/2025/SilentPush-Threat-Actor-Study-2025.pdf) (2025) - Analyzes global threat actor activity and infrastructure trends from 2024, focusing on AI-powered scaling, infrastructure laundering, and Access-as-a-Service models. Key findings highlight persistent state-sponsored APTs, the evolution of FIN7, Scattered Spider, and CryptoChameleon, and the rise of large-scale investment scams, phishing networks, and underground markets.
- [SonicWall](https://www.sonicwall.com/threat-report/) - [Cyber Threat Report](Annual%20Security%20Reports/2025/SonicWall-Cyber-Threat-Report-2025.pdf) (2025) - Analyzes the evolving landscape of cyber threats in 2024, focusing on the rise of ransomware, BEC attacks, and the impact of AI-powered tools. Key findings highlight a significant increase in ransomware and BEC attacks, coupled with the concerning ease with which threat actors can leverage AI and readily available tools to launch sophisticated campaigns.
- [Sophos](https://www.sophos.com/en-us/blog/the-sophos-annual-threat-report-cybercrime-on-main-street-2025) - [Threat Report](Annual%20Security%20Reports/2025/Sophos-Threat-Report-2025.pdf) (2025) - Analyzes the 2025 cyber threat landscape facing small and midsized businesses, identifying ransomware and compromised network devices as the most critical operational risks. Key findings reveal that ransomware accounts for over 90% of [incident response](/@harrisonqian/awesome/wiki/security/incident-response) cases for mid-sized organizations, while compromised edge devices facilitate a quarter of all initial network breaches.
- [Sophos](https://www.sophos.com/en-us/press/press-releases/sophos-active-adversary-report-2026-identity-attacks-dominate-as-threat-groups-proliferate) - [Active Adversary Report](Annual%20Security%20Reports/2026/Sophos-Active-Adversary-Report-2026.pdf) (2026) - Investigates the evolving threat landscape through an analysis of 661 [incident response](/@harrisonqian/awesome/wiki/security/incident-response) cases, focusing on the persistent reliance of attackers on established tools and techniques. Findings reveal that identity-related tactics now dominate the threat environment, accounting for 67.32 percent of all root causes, while data exfiltration reached a record high of 12.71 percent of investigated incidents.
- [SopraSteria](https://www.soprasteria.com) - [State of Security](Annual%20Security%20Reports/2026/SopraSteria-State-of-[Security](/@harrisonqian/awesome/wiki/security/security)-2026.pdf) (2026) - Examines the evolving cybersecurity landscape and the transformative impact of generative [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) on both offensive and defensive operations. Key findings reveal that rapid technological [integration](/@harrisonqian/awesome/wiki/platforms/integration) has enabled a 99.9 percent cost reduction in model processing, while simultaneously introducing new attack vectors such as malicious packages designed to harvest credentials and automate post exploitation activities on compromised devices.
- [Thales](https://cpl.thalesgroup.com/data-threat-report) - [Data-Threat-Report](Annual%20Security%20Reports/2026/Thales-Data-Threat-Report-2026.pdf) (2026) - Analyzes [security](/@harrisonqian/awesome/wiki/security/security) findings and threat trends reported by Thales for 2026, examining key attack patterns, vulnerability data, and defensive recommendations drawn from data collected across hundreds of security practitioners. Findings span 10 or more priority risk areas, providing actionable guidance for organizations seeking to strengthen their security posture.
- [Trend Micro](https://www.trendmicro.com/vinfo/us/security/news/threat-landscape/trend-2025-cyber-risk-report) - [Annual Cybersecurity Threat Report](Annual%20Security%20Reports/2025/TrendMicro-Cybersecurity-Risk-Report-2025.pdf) (2025) - Analyzes enterprise cyber risk exposure across sectors and regions using telemetry from Trend Vision One's Cyber Risk Index framework. Key findings show the [education](/@harrisonqian/awesome/wiki/back-end-development/education) sector maintained the highest risk throughout 2024, while larger organizations exhibited greater exposure due to complex infrastructures and expanded attack surfaces.
- [Truesec](https://www.truesec.com/threat-intelligence-report-2025) - [Threat Intelligence Report](Annual%20Security%20Reports/2025/Truesec-Threat-Intelligence-Report-2025.pdf) (2025) - Analyzes the evolving cyber threat landscape, focusing on key developments and emerging trends. Key insights reveal that while Nordic enterprises are showing positive effects from cybersecurity investments, cybercriminals are increasingly targeting smaller businesses and leveraging AI for social engineering.
- [WatchGuard](https://www.watchguard.com/wgrd-resource-center/security-report-q1-2025) - [Threat Report](Annual%20Security%20Reports/2025/WatchGuard-Threat-Report-2025.pdf) (2025) - Analyzes network and endpoint threat activity observed across WatchGuard [security](/@harrisonqian/awesome/wiki/security/security) appliances in Q1 2025. Notable findings include a 171% spike in network-detected malware per device and a 712% increase in new, unique endpoint malware samples, signaling a surge in evasive and novel threats.
- [With Secure](https://www.withsecure.com/en/expertise/research-and-innovation/research/monthly-threat-highlights-report/february-2025) - [Supply Chain Threat Report](Annual%20Security%20Reports/2025/WithSecure-Supply-Chain-Threat-Report-2025.pdf) (2025) - Analyzes the increasing threat of supply chain attacks, highlighting their impact and the factors contributing to their rise. The report details notable incidents like the 3CX compromise and the MOVEit Transfer vulnerability, emphasizing the potential for widespread damage through trusted software and service providers, as well as the theft of source code from major tech companies.

### Regional Assessments
- [Australian Signals Directorate](https://www.asd.gov.au/news/2025-10-14-australian-signals-directorate-releases-annual-cyber-threat-report-2024-25) - [Cyber Threat Report](Annual%20Security%20Reports/2025/ASD-Cyber-Threat-Report-2025.pdf) (2025) - Analyzes the Australian cyber threat landscape for 2023-2024, focusing on state actors, critical infrastructure attacks, cybercrime, hacktivism, and national resilience efforts. Key findings highlight a significant increase in ransomware attacks targeting critical infrastructure and a concerning rise in hacktivism motivated by geopolitical events.
- [Canada](https://www.cyber.gc.ca/en/guidance/national-cyber-threat-assessment-2025-2026) - [National Cyber Threat Assessment](Annual%20Security%20Reports/2025/Canada-National-Cyber-Threat-Assessment-2025.pdf) (2025) - Analyzes the cyber threats facing Canada from state adversaries and cybercrime, forecasting trends up to 2026. The report highlights the increasing aggressiveness of state adversaries in cyberspace, the resilience of cybercrime due to the Cybercrime-as-a-Service model, and the persistent threat of ransomware to critical infrastructure.
- [Durin](https://durin.ai/blogs/press-releases/durin-releases-2025-holiday-travel-home-[security](/@harrisonqian/awesome/wiki/security/security)-report-revealing-78-of-travelers-will-share-access-codes-this-season-most-will-never-change-them) - [Home Access Report](Annual%20Security%20Reports/2025/Durin-Home-Access-Report-2025.pdf) (2025) - Surveys homeowner practices regarding smart lock and electronic keypad access code sharing and management. Key findings reveal that 78% of holiday travelers share codes, with 22% of homeowners never changing their access codes.
- [Ensign](https://www.ensigninfosecurity.com/resources/threat-insights/cyber-threat-landscape-report-2025) - [Cyber Threat Landscape Report](Annual%20Security%20Reports/2025/Ensign-Cyber-Threat-Landscape-Report-2025.pdf) (2025) - Analyzes the cyber threat landscape in the Asia-Pacific region, highlighting trends and developments observed in 2025. Key findings include increased activity from state-sponsored groups, the persistence of ransomware, and attacks targeting business and professional services firms.
- [Intel471](https://www.intel471.com/resources/whitepapers/uk-2025-threat-landscape-report) - [Uk Threat Landscape Report](Annual%20Security%20Reports/2025/Intel471-UK-Threat-Landscape-Report-2025.pdf) (2025) - Analyzes the escalating cyber threat landscape in the United Kingdom and outlines strategic preparations for the upcoming Cyber [Security](/@harrisonqian/awesome/wiki/security/security) and Resilience Bill. Key findings reveal that the UK ranked as the second most impacted nation for initial access broker activity with 254 victims, underscoring the critical need for enhanced supply chain monitoring and executive accountability.
- [Interpol](https://www.group-ib.com/media-center/press-releases/africa-cybercrime-threat-assessment-report-2025/) - [Africa Cyber Threat Assessment Report](Annual%20Security%20Reports/2025/Interpol-Africa-Cyber-Threat-Assessment-Report-2025.pdf) (2025) - Reveals a steep rise in cyber-related crime across the continent, with online scams, ransomware, business email compromise, and digital sextortion identified as the most prevalent threats. According to INTERPOL, cybercrime now accounts for more than 30 per cent of all reported crime in parts of Western and Eastern Africa.
- [National Cyber [Security](/@harrisonqian/awesome/wiki/security/security) Centre](https://www.ncsc.govt.nz/insights-and-research/cyber-threat-reports/cyber-threat-report-2025/) - [Cyber Threat Report](Annual%20Security%20Reports/2025/NCSC-Cyber-Threat-Report-2025.pdf) (2025) - Analyzes the 2025 cyber threat landscape for New Zealand organizations, detailing five key judgments regarding prevalent threats. Key findings indicate a rise in state-sponsored actors, commercialized cybercrime tools, hacktivist activity driven by global conflicts, supply chain exploitation, and the continued vulnerability to unpatched weaknesses.
- [Office of the Director of National Intelligence](https://www.dni.gov/index.php/newsroom/reports-publications/reports-publications-2026/4141-2026-annual-threat-assessment) - [Annual Threat Assessment](Annual%20Security%20Reports/2026/ODNI-Annual-Threat-Assessment-2026.pdf) (2026) - Assesses the global threat landscape facing the United States, focusing on transnational organized crime, illicit drug trafficking, and emerging technological challenges. Key findings indicate that synthetic opioid-related overdose deaths declined by nearly 30 percent between September 2024 and September 2025, while fentanyl seizures at the northern border increased significantly from 2 pounds to 77 pounds over the past three years.
- [Security Scorecard](https://securityscorecard.com/resources/research-reports/) - [State of South Koreas Cybersecurity](Annual%20Security%20Reports/2026/SecurityScorecard-State-of-South-Koreas-Cybersecurity-2026.pdf) (2026) - Analyzes the cybersecurity posture of South Korea’s top one hundred publicly traded companies by evaluating externally observable risk signals and supply chain dependencies. Findings reveal that 46 percent of these organizations received a D or F rating, while 94 percent face systemic exposure through breached third party vendors, highlighting a critical need for enhanced ecosystem visibility to mitigate elevated breach probabilities.
- [Seqrite](https://www.seqrite.com/india-cyber-threat-report-2026/) - [India Cyber Threat Report](Annual%20Security%20Reports/2026/Seqrite-India-Cyber-Threat-Report-2026.pdf) (2026) - Analyzes the evolving cyber threat landscape in India by examining telemetry data from over eight million endpoints to identify critical vulnerabilities and attack patterns. Key findings reveal that Trojans and file infectors constitute nearly 70 percent of all malicious activity, while ransomware campaigns exceeded one million detections and targeted sectors like [education](/@harrisonqian/awesome/wiki/back-end-development/education) and [healthcare](/@harrisonqian/awesome/wiki/health-and-social-science/healthcare) remain disproportionately vulnerable to sophisticated, AI-assisted intrusions.
- [United States Department of Defense](https://public.cyber.mil/devsecops/) - [State of DevSecOps](Annual%20Security%20Reports/2025/USDoD-State-of-[DevSecOps](/@harrisonqian/awesome/wiki/security/devsecops)-2025.pdf) (2025) - Focuses on the adoption of [DevSecOps](/@harrisonqian/awesome/wiki/security/devsecops) practices within the United States Department of Defense. A key finding is the Air Force's launch of a new software directorate, highlighting a [move](/@harrisonqian/awesome/wiki/programming-languages/move) towards integrating [security](/@harrisonqian/awesome/wiki/security/security) earlier in the software development lifecycle.

### Sector Specific Intelligence
- [Anthropic](https://menlovc.com/perspective/2025-the-state-of-generative-ai-in-the-enterprise/) - [The State of AI](Annual%20Security%20Reports/2026/Anthropic-The-State-of-AI-2026.pdf) (2026) - Examines the current landscape of AI agent adoption and deployment across enterprises, based on a survey of over 500 technical leaders. Key findings reveal that 57% of organizations deploy agents.
- [Bio Catch](https://www.biocatch.com/press-release/banking-scams-up-65-globally-in-last-year) - [Global Scams Report](Annual%20Security%20Reports/2025/Biocatch-Global-Scams-Report-2025.pdf) (2025) - Analyzes global scam trends, highlighting the increasing sophistication and prevalence of social engineering tactics. Key findings reveal a 65% increase in reported scams, with significant regional variations and the emergence of industrialized fraud operations exploiting human trafficking.
- [BioCatch](https://www.biocatch.com/white-paper-digital-banking-fraud-trends-latam-2024-en) - [Digital Banking Fraud Trends in Latin America](Annual%20Security%20Reports/2026/BioCatch-Digital-Banking-Fraud-Trends-in-Latin-America-2026.pdf) (2026) - Examines the current threat landscape and digital banking fraud trends across Latin America, drawing on data from 36 financial institutions. Key findings reveal a 155% increase in social engineering scam cases and.
- [Cyber Int](https://cyberint.com/resource/travel-threat-landscape-2025/) - [Travel Threat Landscape Report](Annual%20Security%20Reports/2025/Cyberint-Travel-Threat-Landscape-Report-2025.pdf) (2025) - Analyzes the cyber threat landscape targeting the travel and tour operations industry, highlighting recent cyber events and future predictions.
- [Gatepoint Research](https://www.aryaka.com/reports-and-guides/state-of-network-[security](/@harrisonqian/awesome/wiki/security/security)-transportation-logistics/) - [The State Of Network Security In Transportation And Logistics](Annual%20Security%20Reports/2025/GatepointResearch-The-State-of-Network-Security-in-Transportation-and-Logistics-2025.pdf) (2025) - Analyzes the network security landscape in the transportation and logistics sector, highlighting priorities, challenges, and technology adoption. The report reveals that staying ahead of cybersecurity threats is a top concern 81%, while GenAI readiness remains low, with only 28% having implemented related solutions.
- [Health ISAC](https://www.newswire.com/news/health-isac-releases-annual-report-on-current-and-emerging-cyber-21986323) - [Annual Threat Report](Annual%20Security%20Reports/2026/Health-ISAC-Annual-Threat-Report-2026.pdf) (2026) - Analyzes the evolving threat landscape within the global health sector, focusing on the systemic risks posed by ransomware, supply chain exploitation, and the [integration](/@harrisonqian/awesome/wiki/platforms/integration) of insecure medical devices. Key findings from a survey of nearly 250 industry professionals reveal that while ransomware remains a top concern, 100 percent of respondents identified [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) enabled attacks as the primary emerging threat for 2026, alongside a persistent vulnerability to third party breaches that continue to compromise millions of patient records.
- [Intuition Lab](https://intuitionlabs.ai/articles/cybersecurity-requirements-ai-medical-devices) - [AI Medical Device Cybersecurity Regulations and Risks](Annual%20Security%20Reports/2026/Intuitionlab-AI-Medical-Device-Cybersecurity-Regulations-and-Risks-2026.pdf) (2026) - Examines the cybersecurity landscape for [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) enabled medical devices by evaluating regulatory mandates, technical [standards](/@harrisonqian/awesome/wiki/miscellaneous/standards), and emerging threat vectors. Key findings reveal that 53 percent of connected medical devices harbor critical vulnerabilities, while the rapid proliferation of over 1,000 authorized AI devices necessitates rigorous secure by design practices to mitigate risks like adversarial attacks and data poisoning.
- [Nokia](https://www.telecomtv.com/content/security/nokia-report-reveals-alarming-extent-of-telco-cybersecurity-threats-53994/) - [Threat Intelligence Report](Annual%20Security%20Reports/2025/Nokia-Threat-Intelligence-Report-2025.pdf) (2025) - Analyzes the 2025 threat landscape for the telecommunications sector, identifying a strategic shift from opportunistic attacks to coordinated, infrastructure-level campaigns targeting [core](/@harrisonqian/awesome/wiki/platforms/core) networks and lawful interception systems. Key insights include the finding that 63% of operators faced living off the land techniques, while high-impact incidents like the Salt Typhoon campaign underscore the growing persistence of state-sponsored actors.
- [Six Map](https://www.sixmap.io/blog/lightbulb-moment-an-exposure-assessment-of-the-u-s-energy-sector/) - [Research Energy Sector Exposure Assessment](Annual%20Security%20Reports/2025/SixMap-Research-Energy-Sector-Exposure-Assessment-2025.pdf) (2025) - Analyzes the external exposures of 21 leading U.S. energy providers to assess their [security](/@harrisonqian/awesome/wiki/security/security) posture and identify systemic risks. The study found nearly 40,000 hosts with over 58,000 exposed services, including a significant number running on non-standard ports, and identified 43 CVEs common to at least 45% of the organizations, indicating potential systemic vulnerabilities.
- [TRM Labs](https://www.trmlabs.com/resources/blog/2026-crypto-crime-report-key-insights-trm-identifies-record-usd-158-billion-in-illicit-crypto-flows-in-2025-reversing-a-multi-year-decline) - [Crypto Crime Report](Annual%20Security%20Reports/2026/TRM-Crypto-Crime-Report-2026.pdf) (2026) - Analyzes the illicit cryptocurrency market in 2025, highlighting key trends and activities. The report finds that while overall illicit crypto volume decreased, ransomware demands reached an all-time high and terrorist financing via cryptocurrency expanded, with stablecoins remaining the preferred choice for illicit actors.
- [TRM Labs](https://www.trmlabs.com/reports-and-whitepapers/global-crypto-policy-review-outlook-2025-26) - [Global Crypto Policy Review Outlook](Annual%20Security%20Reports/2025/TRM-Global-Crypto-Policy-Review-Outlook-2025.pdf) (2025) - Analyzes global cryptocurrency policy developments and their impact on institutional adoption. Key findings indicate that over 70% of reviewed jurisdictions advanced stablecoin regulation, while approximately 80% saw financial institutions announce new digital asset initiatives, driven by increasing regulatory clarity.
- [Trustwave](https://www.trustwave.com/en-us/company/newsroom/news/trustwave-unveils-2025-cybersecurity-threat-report-for-energy-and-utilities-sector-highlights-surge-in-ransomware-attacks/) - [Energy Utilities Risk Radar](Annual%20Security%20Reports/2025/Trustwave-Energy-Utilities-Risk-Radar-2025.pdf) (2025) - Analyzes the unique cybersecurity challenges and evolving threat landscape facing the critical energy and utilities sector. Key findings highlight an 80% year-over-year increase in ransomware attacks, predominantly initiated by phishing 84% and leveraging remote services for lateral movement 96%.
- [Trustwave](https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/2025-[healthcare](/@harrisonqian/awesome/wiki/health-and-social-science/healthcare)-cybersecurity-threats-insights-from-the-trustwave-risk-radar-report/) - [Healthcare Risk Radar](Annual%20Security%20Reports/2025/Trustwave-Healthcare-Risk-Radar-2025.pdf) (2025) - Analyzes the evolving cybersecurity risk profile of the [healthcare](/@harrisonqian/awesome/wiki/health-and-social-science/healthcare) sector, detailing emergent threats and vulnerabilities. Key findings reveal that 45% of attacks originated from exploiting public-facing applications, with ransomware groups like Ransomhub and LockBit 3.0 predominantly targeting US-based healthcare organizations.
- [Trustwave](https://www.trustwave.com/en-us/resources/blogs/trustwave-blog/get-ready-for-the-2025-trustwave-risk-radar-report-hospitality-sector/) - [Hospitality Risk Radar](Annual%20Security%20Reports/2025/Trustwave-Hospitality-Risk-Radar-2025.pdf) (2025) - Examines the persistent threat landscape and unique cybersecurity challenges facing the hospitality sector. Key findings highlight a massive attack surface from publicly exposed services, which account for 61.5% of initial access attempts, and a significant volume of critical vulnerabilities.
- [Trustwave](https://www.trustwave.com/en-us/resources/library/documents/2025-trustwave-spiderlabs-research-navigating-cybersecurity-threats-in-manufacturing-complimentary-reports) - [Manufacturing Risk Radar Report](Annual%20Security%20Reports/2025/Trustwave-Manufacturing-Risk-Radar-Report-2025.pdf) (2025) - Analyzes the evolving threat landscape for the manufacturing sector in 2025. Key findings highlight the increasing convergence of IT and OT systems, a persistent rise in ransomware attacks, and the need for enhanced [security](/@harrisonqian/awesome/wiki/security/security) measures across all attack stages.
- [Upstream](https://upstream.auto/reports/global-automotive-cybersecurity-report/) - [Global Automotive Cybersecurity Report](Annual%20Security%20Reports/2026/Upstream-Global-Automotive-Cybersecurity-Report-2026.pdf) (2026) - Analyzes [security](/@harrisonqian/awesome/wiki/security/security) findings and threat trends reported by Upstream for 2026, examining key attack patterns, vulnerability data, and defensive recommendations. Key findings reveal that the [integration](/@harrisonqian/awesome/wiki/platforms/integration) of Physical AI and Large Language Models has created a double-edged sword for the industry.
- [Visa](https://corporate.visa.com/content/dam/VCOM/corporate/solutions/documents/visa-perc-biannual-report-spring-2025.pdf) - [Biannual Threats Report](Annual%20Security%20Reports/2025/Visa-Biannual-Threats-Report-2025.pdf) (2025) - Analyzes the payments ecosystem's threat landscape, focusing on evolving fraud tactics and scams. Key insights reveal a significant increase in ransomware and data breach incidents, alongside sophisticated fraud schemes leveraging malicious mobile applications and NFC technology.

### Application Security
- [Akamai](https://www.akamai.com/blog/security/year-review-2025-ai-apis-audacity) - [State of [Apps](/@harrisonqian/awesome/wiki/platforms/apps) and API Security](Annual%20Security%20Reports/2025/Akamai-State-of-Apps-and-API-[Security](/@harrisonqian/awesome/wiki/security/security)-2025.pdf) (2025) - Documents a year of material escalation in cyber risks, specifically highlighting how [Artificial Intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) is supercharging both offensive and defensive strategies. Akamai observed over 311 billion web application and API attacks in 2024, a 33% increase from the previous year.
- [Armis](https://www.armis.com/research/early-warning-insights-for-software-supply-chain-attacks/) - [Early Warning Insights for Software Supply Chain Attacks](Annual%20Security%20Reports/2025/Armis-Early-Warning-Insights-for-Software-Supply-Chain-Attacks-2025.pdf) (2025) - Investigates the rising threat of software supply chain attacks driven by [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) and the practice of rapid, unverified code deployment. Research indicates that as many as 40 percent of code suggestions generated by large language models contain exploitable [security](/@harrisonqian/awesome/wiki/security/security) vulnerabilities, while specific slopsquatting incidents have already resulted in over 1,065 malicious package downloads. By shifting focus toward indicators of action rather than static artifacts, organizations can better mitigate the risks posed by automated dependency resolution and the [integration](/@harrisonqian/awesome/wiki/platforms/integration) of fragile, AI-generated code into critical infrastructure.
- [Black Duck](https://www.blackduck.com/resources/analyst-reports/open-source-[security](/@harrisonqian/awesome/wiki/security/security)-risk-analysis.html) - [Open Source Risk Analysis Report](Annual%20Security%20Reports/2026/BlackDuck-Open-Source-Risk-Analysis-Report-2026.pdf) (2026) - Analyzes the current state of open source software usage and security risks across commercial codebases, highlighting the impact of rapid development and [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) [integration](/@harrisonqian/awesome/wiki/platforms/integration). Key findings reveal that 65% of organizations experienced a software supply chain attack in the past year, while the mean number of open source vulnerabilities per codebase has more than doubled alongside a 74% increase in average file counts per codebase.
- [Contrast Security](https://www.contrastsecurity.com/software-under-siege-2025-report) - [Software Under Siege](Annual%20Security%20Reports/2025/ContrastSecurity-Software-Under-Siege-2025.pdf) (2025) - Highlights the increasing prevalence and impact of application-layer attacks targeting custom code, APIs, and application logic. The report reveals that applications face an average of 81 confirmed attacks per month, coupled with nearly 30 serious vulnerabilities, while the rapid adoption of AI and LLMs has led to massive increases in AI-related APIs and CVEs.
- [Data Dog](https://www.datadog.com) - [State Of DevSecOps](Annual%20Security%20Reports/2026/Datadog-State-of-[DevSecOps](/@harrisonqian/awesome/wiki/security/devsecops)-2026.pdf) (2026) - Analyzes the current state of DevSecOps by investigating the prevalence of exploitable vulnerabilities and the risks associated with rapid software dependency updates. Findings indicate that 87 percent of organizations maintain at least one exploitable vulnerability in deployed services, while 41 percent of organizations fail to pin [GitHub](/@harrisonqian/awesome/wiki/development-environment/github) Actions to a specific hash, significantly increasing exposure to supply chain attacks.
- [Digital AI](https://digital.ai/resource-center/whitepapers/2025-application-[security](/@harrisonqian/awesome/wiki/security/security)-threat-report/) - [Application Security Threat Report](Annual%20Security%20Reports/2025/DigitalAI-Application-Security-Threat-Report-2025.pdf) (2025) - Quantifies evolving risks in modern [application security](/@harrisonqian/awesome/wiki/security/application-security). Key findings highlight industry trends, attack data categorized by industry and OS, and regional variations in attack rates.
- [Fluid Attacks](https://fluidattacks.com/reports) - [State Of Attacks](Annual%20Security%20Reports/2025/FluidAttacks-State-of-Attacks-2025.pdf) (2025) - Analyzes the [security](/@harrisonqian/awesome/wiki/security/security) vulnerabilities identified through Continuous [Hacking](/@harrisonqian/awesome/wiki/security/hacking) in 2024, comparing the findings to the previous year. Key insights include a 3.8% decrease in total risk exposure despite a 59.3% increase in reported vulnerabilities, and a significant 65% reduction in the mean time to remediate critical-severity issues.
- [Git Guardian](https://www.gitguardian.com/state-of-secrets-sprawl-report-2025) - [State of Secrets Sprawl](Annual%20Security%20Reports/2025/GitGuardian-State-of-Secrets-Sprawl-2025.pdf) (2025) - Analyzes the prevalence of secrets sprawl in 2024, focusing on the types of secrets exposed and their locations within software development lifecycles. Key findings reveal that generic secrets comprise 58% of all detected leaks, private repositories are eight times more likely to contain secrets than public ones, and collaboration tools represent a significantly overlooked source of exposure.
- [Grip](https://www.grip.security/saas-[security](/@harrisonqian/awesome/wiki/security/security)-risks-report-2025) - [SaaS Security Risks Report](Annual%20Security%20Reports/2025/Grip-SaaS-Security-Risks-Report-2025.pdf) (2025) - Outlines key security risks associated with the growing adoption of SaaS applications, including trends in usage across industries and specific SaaS app statistics. Key findings reveal a significant increase in shadow SaaS deployments and the rapid growth of AI-powered tools, posing substantial and largely unmanaged security risks.
- [Kodem](https://www.kodemsecurity.com/lp/report/appsec/workflows) - [State of AppSec Workflow](Annual%20Security%20Reports/2025/Kodem-State-of-AppSec-Workflow-2025.pdf) (2025) - Analyzes [application security](/@harrisonqian/awesome/wiki/security/application-security) workflows, identifying key bottlenecks and pain points in current practices. The primary bottleneck is remediation, exacerbated by alert fatigue and inefficient vulnerability triage, highlighting the need for increased automation and adaptation to modern development environments.
- [Legit Security](https://www.legitsecurity.com/blog/announcing-2025-state-of-application-risk-report) - [State of Application Risk Report](Annual%20Security%20Reports/2025/LegitSecurity-State-of-Application-Risk-Report-2025.pdf) (2025) - Examines the current state of application risk in 2025, focusing on common vulnerabilities and [security](/@harrisonqian/awesome/wiki/security/security) [testing](/@harrisonqian/awesome/wiki/testing/testing) inefficiencies. Key findings reveal significant issues with secrets exposure, AI-related risks, and software supply chain vulnerabilities, highlighting a need for improved security practices across the software development lifecycle.
- [Reversing Labs](https://www.reversinglabs.com/sscs-report) - [Software Supply Chain [Security](/@harrisonqian/awesome/wiki/security/security) Report](Annual%20Security%20Reports/2026/ReversingLabs-Software-Supply-Chain-Security-Report-2026.pdf) (2026) - Examines the evolving landscape of software supply chain security, highlighting how attackers increasingly exploit open-source ecosystems and CI/CD workflows to achieve persistence. Research reveals a 73% increase in malicious open-source packages during 2025, with npm accounting for nearly 90% of all detections while PyPI experienced a 43% reduction in malware following the implementation of mandatory security controls.
- [Robotti](https://medium.com/@robotti-io/q1-check-in-our-2026-robotti-appsec-report-is-tracking-in-the-right-direction-e68e362e64d7) - [AppSec Report](Annual%20Security%20Reports/2026/Robotti-AppSec-Report-2026.pdf) (2026) - Examines the evolving landscape of [application security](/@harrisonqian/awesome/wiki/security/application-security), emphasizing the transition toward executive accountability and the [integration](/@harrisonqian/awesome/wiki/platforms/integration) of secure by [design principles](/@harrisonqian/awesome/wiki/miscellaneous/design-principles) within modern development lifecycles. Key findings indicate that 50 percent of C level executives will have cybersecurity risk performance metrics tied to their employment contracts by 2026, while the proliferation of complex API architectures and generative [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) continues to expand the attack surface and increase the risk of systemic data exposure.
- [Salt](https://content.salt.security/state-api-report.html) - [State Of API Security](Annual%20Security%20Reports/2025/Salt-State-of-API-[Security](/@harrisonqian/awesome/wiki/security/security)-2025.pdf) (2025) - Highlights the persistent challenges and evolving landscape of API security, driven by rapid digital transformation and cloud migration. Despite widespread API adoption and a nearly universal encounter with security issues, many organizations struggle with accurate inventory, real-time monitoring, and robust posture governance, alongside emerging GenAI-driven risks.
- [SeraphicSecurity](https://www.seraphicsecurity.com) - [Zero Trust Browser Security](Annual%20Security%20Reports/2025/SeraphicSecurity-Zero-Trust-Browser-[Security](/@harrisonqian/awesome/wiki/security/security)-2025.pdf) (2025) - Examines the evolving zero trust browser security market, highlighting its transition from fragmented point solutions to integrated platforms that serve as a central control plane for enterprise security. Market data indicates that the sector generated 622.0 million dollars in 2025, with an anticipated compound annual growth rate of 18.9 percent through 2030 as organizations prioritize browser-native deployment models. North America currently dominates the landscape with 73.2 percent of total revenue, while emerging technologies like chaotic target defense and generative [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) governance become critical differentiators for vendors seeking to secure increasingly complex digital workflows.
- [Sonatype](https://www.sonatype.com) - [State of The Software Supplychain](Annual%20Security%20Reports/2026/Sonatype-State-of-The-Software-Supplychain-2026.pdf) (2026) - Examines the state of the software supply chain, documenting how massive growth in open source usage has created critical infrastructure vulnerabilities and systemic operational risks. Key findings reveal that 65 percent of open source vulnerabilities lack official severity scores, while AI-driven development tools exhibit a 27.76 percent hallucination rate when recommending dependency upgrades, further complicating [security](/@harrisonqian/awesome/wiki/security/security) efforts in an environment where over 1.23 million malicious packages have been identified since 2019.
- [Veracode](https://www.veracode.com/resources/analyst-reports/state-of-software-[security](/@harrisonqian/awesome/wiki/security/security)-2026/) - [State Of Software Security Report](Annual%20Security%20Reports/2026/Veracode-State-of-Software-Security-Report-2026.pdf) (2026) - Analyzes the current state of software security by evaluating the widening gap between the rapid creation of vulnerabilities and the limited capacity of organizations to remediate them effectively. Findings indicate that security debt now impacts 82 percent of organizations, representing an 11 percent annual increase, while the prevalence of critical security debt has surged by 20 percent as high risk vulnerabilities experienced a 36 percent relative increase over the previous year.
- [Wallarm](https://siliconangle.com/2026/02/17/wallarm-warns-apis-fueling-ai-era-breaches-machine-speed/) - [API Threat Stats Report](Annual%20Security%20Reports/2026/Wallarm-API-Threat-Stats-Report-2026.pdf) (2026) - Examines the evolving landscape of API threats and risks in 2025, highlighting how attackers exploit repeatable failures in identity, access control, and exposed interfaces. Key findings reveal that 36% of published AI vulnerabilities involve APIs, with cross-site issues emerging as the dominant API threat, and broken access control continuing to enable large-scale attacks.
- [Wiz](https://www.wiz.io/reports/state-of-code-[security](/@harrisonqian/awesome/wiki/security/security)-2025) - [State of Code Security](Annual%20Security%20Reports/2025/Wiz-State-of-Code-Security-2025.pdf) (2025) - Examines the security posture of code repositories and CI/CD pipelines, highlighting the deep connection between code and cloud environments. It reveals that 61% of organizations have secrets exposed in public repositories , with [GitHub](/@harrisonqian/awesome/wiki/development-environment/github) dominating the VCS landscape but also exhibiting a significantly higher ratio of public repositories with insecure workflow permissions and weak branch protection.

### Cloud Security
- [Bellsoft](https://bell-sw.com/state-of-container-[security](/@harrisonqian/awesome/wiki/security/security)-2025/) - [State-of-Container-Security](Annual%20Security%20Reports/2025/Bellsoft-State-of-Container-Security-2025.pdf) (2025) - Analyzes security findings and threat trends including key attack patterns, vulnerability data, and defensive recommendations drawn from data collected across hundreds of security practitioners. Findings span 10 or more priority risk areas, providing actionable guidance for organizations seeking to strengthen their security posture.
- [Censys](https://censys.com/reports/2025-sotir) - [State Of The Internet](Annual%20Security%20Reports/2025/Censys-State-of-the-Internet-2025.pdf) (2025) - Analyzes adversary infrastructure, focusing on command-and-control servers and surrounding tools used by threat actors. The report reveals trends in malware detection, C2 server time-to-live, open directory lifespans, and the use of residential proxy infrastructure, highlighting the importance of historical internet data for tracking malicious activities.
- [Data Dog](https://www.datadoghq.com/state-of-cloud-security/) - [State Of Cloud Security](Annual%20Security%20Reports/2025/DataDog-State-of-Cloud-[Security](/@harrisonqian/awesome/wiki/security/security)-2025.pdf) (2025) - Analyzes cloud security posture across AWS, Azure, and [Google Cloud](/@harrisonqian/awesome/wiki/platforms/google-cloud) with a focus on identity risks, default security gaps, and the uneven adoption of guardrails like IMDSv2, data perimeters, and public access blocks. The study highlights persistent trouble spots such as long-lived credentials, overprivileged third-party roles, and aging workloads that miss secure defaults, even as multi-account governance and modern identity patterns gain traction.
- [Google](https://inthecloud.withgoogle.com/security-threat-intel/subscribe.html) - [Threat Horizons Report](Annual%20Security%20Reports/2025/Google-Cloud-Threat-Horizons-Report-2025.pdf) (2025) - Analyzes [security](/@harrisonqian/awesome/wiki/security/security) findings and threat trends reported by Google for 2025, examining key attack patterns, vulnerability data, and defensive recommendations drawn from data collected across hundreds of security practitioners. Findings span 10 or more priority risk areas, providing actionable guidance for organizations seeking to strengthen their security posture.
- [Hornet](https://www.hornetsecurity.com/us/cyber-[security](/@harrisonqian/awesome/wiki/security/security)-report/) - [Cybersecurity Report](Annual%20Security%20Reports/2025/Hornet-Cybersecurity-Report-2025.pdf) (2025) - Analyzes the current Microsoft 365 threat landscape, focusing on email security trends and attack techniques. Key findings reveal a significant increase in sophisticated attacks utilizing brand impersonation and malicious attachments, with notable variations in threat levels across different business sectors.
- [Orca](https://www.orca.com) - [Estimating Return on Investment for the Cloud](Annual%20Security%20Reports/2026/Orca-Estimating-Return-on-Investment-for-the-Cloud-2026.pdf) (2026) - Evaluates the economic impact of transitioning to a unified cloud [security](/@harrisonqian/awesome/wiki/security/security) platform by comparing fragmented legacy toolsets against modern agentless and [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) capabilities. Analysis demonstrates that a representative mid-sized enterprise can achieve an annual cloud security return on investment of 198.33 percent, while simultaneously reducing operational friction through consolidated visibility and automated remediation workflows.
- [Recorded Future](https://www.recordedfuture.com/research/cloud-threat-hunting-defense-landscape) - [Cloud Threat Hunting And Defense Landscape](Annual%20Security%20Reports/2025/RecordedFuture-Cloud-Threat-Hunting-and-Defense-Landscape-2025.pdf) (2025) - Analyzes the evolving cloud threat landscape by identifying five primary attack vectors posing significant risk to cloud environments. Key insights reveal that initial compromises often stem from misconfigured cloud endpoints or stolen credentials, while threat actors increasingly leverage cloud-native ransomware tactics and abuse legitimate SaaS/IaaS resources to complicate detection.
- [Orca](https://orca.security/lp/2025-state-of-cloud-[security](/@harrisonqian/awesome/wiki/security/security)-report/) - [State of Cloud Security Report](Annual%20Security%20Reports/2025/Orca-State-of-Cloud-Security-2025.pdf) (2025) - Analyzes security challenges in multi-cloud environments, with a focus on AI risk, data exposure, and neglected assets. Key findings reveal that 62% of organizations have at least one vulnerable AI package, 38% expose sensitive databases to the public, and 13% possess a single asset with over 1,000 potential attack paths.
- [Sysdig](https://sysdig.com/2025-cloud-native-[security](/@harrisonqian/awesome/wiki/security/security)-and-usage-report/) - [Cloud Native Security and Usage Report](Annual%20Security%20Reports/2025/Sysdig-Cloud-Native-Security-Report-2025.pdf) (2025) - Analyzes cloud-native security trends and usage patterns in 2025. Key findings reveal a significant increase in the adoption of runtime security tools and a growing focus on securing AI/ML workloads, alongside persistent challenges in managing identities across human and machine interactions.
- [Toc Consulting](https://hostingjournalist.com/knowledgebase/the-state-of-aws-[security](/@harrisonqian/awesome/wiki/security/security)-2026-from-iam-to-agentic-ai) - [The State of AWS Security](Annual%20Security%20Reports/2026/TocConsulting-The-State-of-AWS-Security-2026.pdf) (2026) - Examines the evolving AWS threat landscape, focusing on the transition from traditional misconfiguration exploits to sophisticated attacks involving autonomous agentic systems. Key findings reveal that 48 percent of cybersecurity professionals identify agentic AI as the primary attack vector for 2026, while historical data confirms that 99 percent of cloud security failures remain attributable to customer misconfigurations.
- [Unosecure](https://unosecure.com) - [Cloud Compliance Pulse](Annual%20Security%20Reports/2025/Unosecure-Cloud-Compliance-Pulse-2025.pdf) (2025) - Provides a half-yearly benchmark of cloud compliance and identity [security](/@harrisonqian/awesome/wiki/security/security) posture across 50 organizations, utilizing automated control scans for a data-driven assessment. It reveals that 98% of firms exhibit at least one high-severity gap, with 70% of critical findings stemming from common issues like missing MFA on privileged accounts and excessive role privileges.
- [Varonis](https://info.varonis.com/en/state-of-data-[security](/@harrisonqian/awesome/wiki/security/security)-report-2025) - [State Of Data Security Report](Annual%20Security%20Reports/2025/Varonis-State-of-Data-Security-Report-2025.pdf) (2025) - Analyzes the state of data security in 2025, focusing on the impact of AI adoption on data risk across 1,000 organizations. The report reveals that 90% of organizations have exposed sensitive cloud data, 88% have stale ghost users, and 99% have sensitive data dangerously exposed to AI tools, highlighting the urgent need for proactive AI security measures.
- [Wiz](https://www.wiz.io/reports/cloud-data-[security](/@harrisonqian/awesome/wiki/security/security)-report-2025) - [Cloud Data Security Snapshot](Annual%20Security%20Reports/2025/Wiz-Cloud-Data-Security-Snapshot-2025.pdf) (2025) - Analyzes current cloud data security exposure trends. A significant finding reveals that 54% of cloud environments have exposed assets containing sensitive data, highlighting the critical need for improved access controls and vulnerability management.
- [Wiz](https://www.wiz.io/state-of-ai-in-the-cloud) - [State of AI in the Cloud](Annual%20Security%20Reports/2025/Wiz-State-of-AI-in-the-Cloud-2025.pdf) (2025) - Analyzes the current state of AI in cloud environments, focusing on adoption rates, [security](/@harrisonqian/awesome/wiki/security/security) challenges, and governance issues. Key findings reveal DeepSeek's rapid growth and the continued dominance of OpenAI, alongside a rising trend of self-hosted AI deployments and stabilized adoption of AI managed services.

### Vulnerabilities
- [Beyond Trust](https://www.beyondtrust.com/resources/whitepapers/microsoft-vulnerability-report) - [Microsoft Vulnerability Report](Annual%20Security%20Reports/2025/BeyondTrust-Microsoft-Vulnerability-Report-2025.pdf) (2025) - Analyzes the 2024 landscape of Microsoft vulnerabilities and their long-term trends. Key findings indicate a record high of 1,360 total vulnerabilities, alongside an all-time low of 78 critical vulnerabilities, though Microsoft Edge saw an unexpected rise in critical issues.
- [Chainguard](https://get.chainguard.dev/cost-of-cves-2025-report) - [The Cost of CVEs](Annual%20Security%20Reports/2025/Chainguard-The-Cost-of-CVEs-2025.pdf) (2025) - Aanalyzes the financial impact of CVE management on organizations using containerized environments. Key findings indicate that mid-market organizations can unlock significant value through decreased risk $2.8M, increased revenue $2.2M, and faster innovation $3.3M by improving their CVE management practices and compliance.
- [Deepstrike](https://deepstrike.io/blog/vulnerability-statistics-2025) - [Vulnerabilities Statistics](Annual%20Security%20Reports/2025/Deepstrike-Vulnerabilities-Statistics-2025.pdf) (2025) - Analyzes the global surge in cybersecurity vulnerabilities throughout 2025, documenting a record pace of disclosures and the increasing speed of weaponization by threat actors. Key findings reveal that over 21,500 vulnerabilities were cataloged by midyear, with 38 percent rated as high or critical severity, while 28 percent of observed exploits were launched within 24 hours of initial disclosure.
- [Edgescan](https://www.edgescan.com/stats-report/) - [Vulnerability Statistics Report](Annual%20Security%20Reports/2025/Edgescan-Vulnerability-Statistics-Report-2025.pdf) (2025) - Analyzes the global state of full stack [security](/@harrisonqian/awesome/wiki/security/security) by evaluating vulnerability data across web applications, APIs, and host systems to provide actionable risk management insights. Findings reveal that 53 percent of vulnerabilities discovered in 2024 were classified as high or critical severity, while the number of publicly reported exploits in the wild increased by 20 percent compared to the previous year.
- [GreyNoise](https://www.greynoise.io/resources/2026-state-of-the-edge-report) - [State of the Edge Report](Annual%20Security%20Reports/2026/GreyNoise-State-of-the-Edge-Report-2026.pdf) (2026) - Investigates the evolving [security](/@harrisonqian/awesome/wiki/security/security) landscape of decentralized edge infrastructure, focusing on the increasing exploitation of routers, firewalls, and remote access gateways. Data from the sensor network reveals a 40 percent increase in unique IP addresses attempting to identify misconfigured edge devices, highlighting a critical trend where the time between vulnerability disclosure and weaponization has compressed from weeks to mere hours for edge facing hardware.
- [GreyNoise](https://www.greynoise.com) - [Mass Internet Exploitation Report](Annual%20Security%20Reports/2025/GreyNoise-Mass-Internet-Exploitation-Report-2025.pdf) (2025) - Examines the evolution of mass internet exploitation and the rapid weaponization of newly disclosed vulnerabilities observed through a global network of passive sensors. Data indicates that attackers are increasingly prioritizing N-day vulnerabilities that have remained unpatched for 30 to 90 days, while simultaneously leveraging legitimate administrative tools to facilitate post-exploitation activities and evade traditional signature-based detection systems across the global IPv4 space.
- [Imperva](https://www.imperva.com/resources/resource-library/reports/2025-bad-bot-report/) - [Bad Bot Report](Annual%20Security%20Reports/2025/Imperva-Bad-Bot-Report-2025.pdf) (2025) - Analyzes the 2025 Imperva Bad Bot Report, detailing the evolving landscape of automated internet traffic and its impact on businesses. Key findings reveal that automated traffic now surpasses human activity at 51%, with malicious [bots](/@harrisonqian/awesome/wiki/miscellaneous/bots) comprising 37% of all internet traffic, driven significantly by the increasing accessibility and sophistication of AI-powered attack tools.
- [Flexera](https://info.flexera.com/SVM-REPORT-Annual-Vulnerability-Review?lead_source=Organic%20Search) - [Annual Vulnerability Review](Annual%20Security%20Reports/2025/Flexera-Annual-Vulnerability-Review-2025.pdf) (2025) - Analyzes the monthly vulnerability landscape based on Secunia Research data, providing insights into emerging threats and trends. Key findings include a significant year-to-date increase in advisories and the identification of actively exploited zero-day vulnerabilities in critical software like Microsoft [Windows](/@harrisonqian/awesome/wiki/platforms/windows) and Google Chrome.
- [Greyn Noise](https://www.greynoise.io/blog/greynoise-uncovers-early-warning-signals-emerging-vulnerabilities) - [Early Warning Signals Attacker Behavior Precedes New Vulnerabilities Report](Annual%20Security%20Reports/2025/GreyNoise-Early-Warning-Signals-Attacker-Behavior-Precedes-New-Vulnerabilities-Report-2025.pdf) (2025) - Analyzes the correlation between spikes in attacker activity and subsequent CVE disclosures, particularly in edge technologies. The report reveals that in 80% of analyzed cases, attacker activity spikes preceded new CVE disclosures within six weeks, offering defenders a critical window for proactive [security](/@harrisonqian/awesome/wiki/security/security) measures.
- [Hornet](https://www.hornetsecurity.com/en/cyber-[security](/@harrisonqian/awesome/wiki/security/security)-report/) - [Cybersecurity Report](Annual%20Security%20Reports/2026/Hornet-Cybersecurity-Report-2026.pdf) (2026) - Examines the 2026 cybersecurity threat landscape based on Hornetsecurity's analysis of over 72 billion [emails](/@harrisonqian/awesome/wiki/front-end-development/emails) processed, highlighting evolving attack vectors and defensive strategies. Key findings reveal a 131% surge in malware-laden [emails](/@harrisonqian/awesome/wiki/front-end-development/emails), a 29% increase in ransomware victim organizations, and a growing reliance on AI by threat actors alongside increased investment in AI-powered defenses.
- [Intruder](https://www.intruder.io/downloads/exposure-management-index) - [Exposure Management Index](Annual%20Security%20Reports/2025/Intruder-Exposure-Management-Index-2025.pdf) (2025) - Analyzes cybersecurity exposure trends across 3,000 small to midsize organizations, focusing on vulnerability detection and response metrics. Key findings reveal a 19% increase in high-severity issues driven by AI-weaponized legacy CVEs, alongside a significant improvement in critical remediation rates to 89% within 30 days.
- [Recorded Future](https://www.recordedfuture.com/research/h1-2025-malware-and-vulnerability-trends) - [Malware And Vulnerability Trends](Annual%20Security%20Reports/2025/RecordedFuture-Malware-and-Vulnerability-Trends-2025.pdf) (2025) - Analyzes malware and vulnerability trends observed in the first half of 2024, focusing on exploitation of remote access and [security](/@harrisonqian/awesome/wiki/security/security) software. Key insights reveal a significant 103% increase in Magecart infections and the continued dominance of infostealer malware, with operators actively refining evasion techniques.
- [Telefonicatech](https://telefonicatech.com/en/blog/linux-and-the-vulnerability-paradox-more-reports-more-security) - [Security Status Report](Annual%20Security%20Reports/2025/Telefonicatech-[Security](/@harrisonqian/awesome/wiki/security/security)-Status-Report-2025.pdf) (2025) - Analyzes the cybersecurity landscape of the first half of 2025, covering mobile security, significant vulnerabilities, and APT operations. Key insights reveal a growing concern over the sustainability of critical infrastructure like CVE, alongside a surge in credential theft and sophisticated malware campaigns targeting both consumers and industrial systems.
- [Torq](https://torq.io/resources/ai-soc-leadership-report-2026/) - [AI SOC Leadership Report](Annual%20Security%20Reports/2026/Torq-AI-SOC-Leadership-Report-2026.pdf) (2026) - Examines the current state of [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) [integration](/@harrisonqian/awesome/wiki/platforms/integration) within [security](/@harrisonqian/awesome/wiki/security/security) operations centers, highlighting the operational challenges caused by fragmented toolsets and the evolving role of analysts. Key findings reveal that while 79 percent of organizations have adopted [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence), 80 percent rely on disconnected point solutions, and 92 percent of security leaders identify trust as the primary barrier to further expansion, specifically citing the need for greater transparency in how automated systems reach their conclusions.
- [Vuln Check](https://www.vulncheck.com/blog/state-of-exploitation-2026) - [State Of Exploitation](Annual%20Security%20Reports/2026/VulnCheck-State-of-Exploitation-2026.pdf) (2026) - In 2025, VulnCheck identified 884 Known Exploited Vulnerabilities KEVs for which evidence of exploitation was observed for the first time. Our analysis shows that 28.96% of KEVs in 2025 were exploited on or before the day their CVE was published, an increase from the 23.6% observed in our 2024 trends in exploitation report.
- [VulnCheck](https://www.vulncheck.com) - [Exploring Network Edge Devices](Annual%20Security%20Reports/2026/VulnCheck-Exploring-Network-Edge-Devices-2026.pdf) (2026) - Examines the [security](/@harrisonqian/awesome/wiki/security/security) landscape of network edge devices, focusing on the prevalence of vulnerabilities within unsupported and end of life hardware. Key findings reveal that 42.5 percent of exploited vulnerabilities affect end of life or likely end of life devices, while 65 percent of vulnerabilities targeted by botnets specifically impact these unsupported products.

### Ransomware
- [Abnormal](https://abnormal.ai/about/news/employee-engagement-vendor-email-compromise-threat-report) - [Read Replied Compromised Employee Engagement Trends](Annual%20Security%20Reports/2025/Abnormal-Read-Replied-Compromised-Employee-Engagement-Trends-2025.pdf) (2025) - Analyzes employee engagement trends with vendor email compromise attacks, revealing significant behavioral blind spots. The report highlights a 44.2% overall employee engagement rate with VEC messages and a failure to report 98.5% of text-based advanced attacks, underscoring the urgent need to reduce exposure to malicious content.
- [Akamai](https://www.akamai.com/lp/soti/ransomware-trends-2025) - [Ransomware Report](Annual%20Security%20Reports/2025/Akamai-Ransomware-Report-2025.pdf) (2025) - Focuses on the evolving ransomware landscape in 2025, highlighting the increasing complexity and volatility of threats. The report reveals the [integration](/@harrisonqian/awesome/wiki/platforms/integration) of AI and LLMs by ransomware groups, the rise of quadruple extortion tactics, and the weaponization of compliance regulations, alongside regional trends and the blurring lines between cybercrime and hacktivism.
- [Cyfirma](https://www.cyfirma.com/research/tracking-ransomware-jan-2026/) - [Tracking Ransomware](Annual%20Security%20Reports/2026/Cyfirma-Tracking-Ransomware-2026.pdf) (2026) - Investigates the evolving ransomware landscape in early 2026, highlighting a shift toward user-mediated access, browser-centric exploitation, and psychological coercion over traditional encryption. Data indicates that ransomware activity reached 683 incidents in January 2026, representing a significant increase from the 511 incidents recorded in January 2025, while professional services and manufacturing remain the most targeted sectors for extortion.
- [Gen Digital](https://www.gendigital.com/blog/insights/reports/threat-report-q2-2025) - [Threat Report](Annual%20Security%20Reports/2025/Gen-Threat-Report-2025.pdf) (2025) - Examines prevalent cyber threats and their impact on ordinary users during Q2/2025. Notable insights reveal the first instance of AI-powered ransomware, a staggering 340% increase in Facebook-based financial scams, and a 317% rise in malicious push notifications.
- [Guidepoint](https://www.guidepointsecurity.com/resources/grit-2026-ransomware-and-cyber-threat-report/) - [GRIT Ransomware Annual Report](Annual%20Security%20Reports/2026/Guidepoint-Ransomware-Annual_Report-2026.pdf) (2026) - Threat actors continue to evolve in their tactics, techniques, and procedures with AI/LLM enabling more rapid adaptation and continuing to reduce barriers to entry for [less](/@harrisonqian/awesome/wiki/front-end-development/less)-skilled and unskilled actors. Key findings include an in-depth look at the RansomHub threat actor and a spotlight on critical infrastructure vulnerabilities, along with an analysis of post-compromise detection methods.
- [Howden](https://www.howdengroupholdings.com/sites/default/files/2025-09/howden-2025-cyber-report-rebooting-growth.pdf) - [Cyber Report Rebooting Growth](Annual%20Security%20Reports/2025/Howden-Cyber-Report-Rebooting-Growth-2025.pdf) (2025) - Examines the current state and future growth potential of the cyber insurance market, with a specific focus on unlocking new risk pools in underserved European regions. Key findings reveal an estimated €307 billion economic.
- [Rapid7](https://www.instagram.com/p/DRRAGoAkmLw/) - [Threat Landscape Report Q3](Annual%20Security%20Reports/2025/Rapid7-Threat-Landscape-Report-Q3-2025.pdf) (2025) - Analyzes the evolving global threat landscape in the third quarter of 2025, focusing on ransomware trends, nation-state espionage, and the exploitation of critical infrastructure. Key findings reveal that 88 distinct ransomware groups were active during this period, with the business services sector emerging as the primary target, accounting for 18 percent of all reported leak site posts.
- [Symantec](https://www.symantec.com) - [Ransomware Threat Landscape](Annual%20Security%20Reports/2026/Symantec-Ransomware-Threat-Landscape-2026.pdf) (2026) - Analyzes the evolving ransomware threat landscape and the shift toward encryptionless extortion tactics during 2025. While traditional ransomware attacks saw a marginal 0.8 percent increase, the total volume of extortion incidents surged by 23 percent when accounting for data theft operations that bypass file encryption entirely.
- [Veeam](https://www.veeam.com/blog/ransomware-trends.html) - [Ransomware Trends](Annual%20Security%20Reports/2025/Veeam-Ransomware-Trends-2025.pdf) (2025) - Analyzes the evolving ransomware threat landscape and proactive resilience strategies for 2025. Key findings reveal a slight decrease in overall attack impact, a significant decline in ransom payments, and a rise in data exfiltration attacks as threat actors adapt to increased law enforcement pressure.
- [Vipre](https://vipre.com/resources/q2-2025-email-threat-report/) - [Email Threat Report](Annual%20Security%20Reports/2025/Vipre-Email-Threat-Report-2025.pdf) (2025) - Examines email-based threat trends and evolving social engineering tactics observed in Q2 2025, emphasizing human-centered attacks. Key findings highlight the sustained targeting of manufacturing and retail, a significant shift towards customized phishing deployments, and BEC scams increasingly localized to Scandinavian languages.
- [ZScaler](https://www.zscaler.com/campaign/threatlabz-ransomware-report) - [Threatlabz Ransomware Report](Annual%20Security%20Reports/2025/ZScaler-Threatlabz-Ransomware-Report-2025.pdf) (2025) - Examines the current ransomware landscape, detailing top trends, targets, and evolving attack methodologies. Key findings reveal a 145.9% surge in blocked ransomware attempts and a 92.7% increase in data exfiltration, signaling a broader shift towards data-only extortion, with [generative AI](/@harrisonqian/awesome/wiki/computer-science/generative-ai) further enhancing attack sophistication.
- [With Secure](https://www.withsecure.com/en/expertise/research-and-innovation/research/monthly-threat-highlights-report) - [Ransomware Threat Report](Annual%20Security%20Reports/2025/WithSecure-Ransomware-Threat-Report-2025.pdf) (2025) - Analyzes the evolving ransomware threat landscape, highlighting trends and developments from 2021. The report indicates a decrease in new ransomware families but emphasizes ransomware's continued prevalence, accounting for nearly one-fifth of identified threats, with WannaCry remaining the most dominant family due to its automated spread.

### Data Breaches
- [Allianz](https://commercial.allianz.com/news-and-insights/news/directors-and-officers-insurance-insights-2026.html) - [Commercial Directors and Officers Insurance Insights](Annual%20Security%20Reports/2026/Allianz-Commercial-Directors-and-Officers-Insurance-Insights-2026.pdf) (2026) - Examines the evolving landscape of directors and officers liability, highlighting how geopolitical instability, cyber threats, and [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) are driving increased litigation and regulatory scrutiny. Key findings reveal that the average settlement value for securities class actions rose by 27 percent to 56 million dollars in the first half of 2025, while global business insolvencies are projected to increase by 6 percent in 2025 and 5 percent in 2026.
- [Cyentia](https://www.cyentia.com/iris2025/) - [Information Risk Insights Study](Annual%20Security%20Reports/2025/Cyentia-Information-Risk-Insights-Study-2025.pdf) (2025) - Analyzes incident probability and the increasing risks associated with third-party relationships. A key finding is that incident probability has almost quadrupled in the last 15 years, driven in part by threat actors exploiting trusted relationships with external service providers to compromise target organizations.
- [Deepstrike](https://deepstrike.io/blog/cybersecurity-statistics-2025-threats-trends-challenges) - [Cybersecurity Statistics](Annual%20Security%20Reports/2026/Deepstrike-Cybersecurity-Statistics-2026.pdf) (2026) - Analyzes the global cybersecurity landscape by evaluating incident volumes, financial impacts, and evolving threat vectors across diverse industries. Key findings reveal a 32 percent year over year increase in global ransomware attacks reaching 7,419 incidents in 2025, while reported cybercrime losses surged to 16.6 billion dollars according to FBI data.
- [IBM](https://www.ibm.com/security/data-breach) - [Cost Of A Data Breach Report](Annual%20Security%20Reports/2025/IBM-Cost-of-a-Data-Breach-Report-2025.pdf) (2025) - Analyzes the financial impact of data breaches, with a significant focus on the emerging risks and benefits associated with [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) adoption. While global average breach costs declined to USD 4.44 million due to AI-powered defenses, findings reveal that 97% of AI-related breaches lacked proper access controls, and 16% involved AI-driven attacks.
- [Identity Theft Resource Center](https://www.idtheftcenter.org/wp-content/uploads/2025/07/ITRC-H1-2025-Data-Breach-Analysis.pdf) - [Annual Data Breach Report](Annual%20Security%20Reports/2025/ITRC-Annual-Data-Breach-Report-2025.pdf) (2025) - Analyzes the U.S. data breach landscape in the first half of 2025, identifying a persistent dominance of cyberattacks and supply chain vulnerabilities. Key findings highlight a sharp decline in victim notices despite steady compromise volumes, alongside a concerning trend where 69% of breach notifications fail to disclose specific attack vectors.
- [ORDR](https://ordr.net/cybersecurity-statistics) - [Cybersecurity Statistics Report](Annual%20Security%20Reports/2026/ORDR-Cybersecurity-Statistics-Report-2026.pdf) (2026) - Examines the evolving cybersecurity landscape and the financial impact of data breaches across various industries in 2026. Global cybercrime costs are projected to reach 10.5 trillion dollars this year, while organizations utilizing [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) for [security](/@harrisonqian/awesome/wiki/security/security) operations achieve detection times 108 days faster than those relying on traditional methods. These findings underscore the critical necessity for proactive defense strategies and automated [incident response](/@harrisonqian/awesome/wiki/security/incident-response) to mitigate the rising frequency of ransomware and credential theft attacks.
- [Riskrecon](https://www.riskrecon.com) - [Ripples Across The Risk Surface](Annual%20Security%20Reports/2025/Riskrecon-Ripples-Across-The-Risk-Surface-2025.pdf) (2025) - Investigates the prevalence and financial impact of multi-party [ripple](/@harrisonqian/awesome/wiki/decentralized-systems/ripple) incidents, which occur when a single cybersecurity breach propagates across multiple organizations. Analysis of over 1,500 incidents reveals that while [ripple](/@harrisonqian/awesome/wiki/decentralized-systems/ripple) events are [less](/@harrisonqian/awesome/wiki/front-end-development/less) frequent than single-party breaches, they routinely trigger losses 10 times higher for the generating firm. Furthermore, the data indicates that downstream costs for receiving organizations have risen steadily over time, with median per-firm losses for generators reaching 4.7 million dollars compared to 1.8 million dollars for receivers.
- [RPC](https://www.rpclegal.com/thinking/insurance-reviews/annual-insurance-review-2026/) - [Annual Insurance Review](Annual%20Security%20Reports/2026/RPC-Annual-Insurance-Review-2026.pdf) (2026) - Examines the evolving landscape of insurance risks, focusing on the intersection of [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence), cybersecurity, and emerging litigation trends in the United States. Key findings indicate that while cyber claim frequency remained stable, severity dropped by 50 percent year over year due to improved [incident response](/@harrisonqian/awesome/wiki/security/incident-response), even as business email compromise and funds transfer fraud accounted for 60 percent of total cyber claims.
- [Security Score Card](https://securityscorecard.com/resource/global-third-party-breach-report/) - [Third Party Breach Report](Annual%20Security%20Reports/2025/SecurityScorecard-Third-Party-Breach-Report-2025.pdf) (2025) - Analyzes the landscape of third-party cyber risk and its impact on organizations globally. Key findings indicate a significant increase in third-party breaches, with Retail & Hospitality and Technology sectors experiencing the highest exposure, and file transfer software vulnerabilities emerging as a primary attack vector.
- [Verizon](https://www.verizon.com/business/resources/reports/dbir/) - [Data Breach Investigations Report](Annual%20Security%20Reports/2025/Verizon-Data-Breach-Investigations-Report-2025.pdf) (2025) - Analyzes data breach trends and patterns from 2025. Key findings reveal a significant increase in social engineering attacks and a persistent reliance on easily exploitable web application vulnerabilities, highlighting the need for improved employee [security](/@harrisonqian/awesome/wiki/security/security) awareness training and robust [application security](/@harrisonqian/awesome/wiki/security/application-security) measures.

### Physical Security
- [Dragos](https://www.dragos.com/ot-cybersecurity-year-in-review/) - [OT Cybersecurity Report A Year in Review](Annual%20Security%20Reports/2025/Dragos-OT-Cybersecurity-Report-A-Year-in-Review-2025.pdf) (2025) - Analyzes the 2025 OT/ICS cybersecurity landscape, focusing on adversary tactics and defender progress. Key findings reveal a rise in OT-centric cyber operations fueled by geopolitical tensions, particularly the Ukraine-Russia conflict, and the increasing activity of threat groups like KAMACITE and ELECTRUM.
- [Security Industry Association](https://www.securitysystemsnews.com/article/sia-announces-the-2025-[security](/@harrisonqian/awesome/wiki/security/security)-megatrends) - [Security Megatrends](Annual%20Security%20Reports/2026/SIA-Security-Megatrends-2026.pdf) (2026) - Examines the evolving landscape of security technology and its [integration](/@harrisonqian/awesome/wiki/platforms/integration) into broader business operations. Key insights reveal a significant shift towards AI-driven software solutions and the reinvention of hardware to provide richer data, while security solutions increasingly lose their traditional boundaries to create unified, intelligent systems.
- [Genetec](https://www.genetec.com/a/physical-[security](/@harrisonqian/awesome/wiki/security/security)-report) - [State of Physical Security](Annual%20Security%20Reports/2026/Genetec-State-of-Physical-Security-2026.pdf) (2026) - Analyzes the current state of physical security, focusing on global trends and challenges in 2026. This report explores how the industry is adapting and how strategic innovation¹ is redefining what’s possible in physical security. Technology must be managed and deployed with intention, not for its own sake.
- [NMFTA](https://nmfta.org/newsroom-articles/nmfta-releases-2026-transportation-industry-cybersecurity-trends-report/) - [Transportation Industry Cybersecurity Trends Report](Annual%20Security%20Reports/2026/NMFTA-Transportation-Industry-Cybersecurity-Trends-Report-2026.pdf) (2026) - Analyzes the 2026 cybersecurity landscape for the transportation industry, characterizing the convergence of cargo theft and cybercrime as a comprehensive operational resilience challenge. Key findings identify the emergence of specialized cybercriminal alliances and AI-driven threats as primary risks, necessitating a holistic strategy that merges physical [security](/@harrisonqian/awesome/wiki/security/security) with digital defense mechanisms.
- [Nozomi](https://www.nozominetworks.com/ot-iot-cybersecurity-trends-insights-february-2025) - [Networks OT IoT [Security](/@harrisonqian/awesome/wiki/security/security) Report](Annual%20Security%20Reports/2025/Nozomi-Networks-OT-IoT-Security-Report-2025.pdf) (2025) - Analyzes operational technology and [internet of things](/@harrisonqian/awesome/wiki/hardware/internet-of-things) cybersecurity trends in the second half of 2024. Key findings reveal a significant increase in sophisticated attacks targeting industrial control systems, highlighting the growing need for robust security measures in critical infrastructure.
- [Waterfall Security](https://waterfall-[security](/@harrisonqian/awesome/wiki/security/security).com/ot-insights-center/ot-cybersecurity-insights-center/webinar-2026-ot-cyber-threat-report/) - [OT Cyber Threat Report](Annual%20Security%20Reports/2026/WaterfallSecurity-OT-Cyber-Threat-Report-2026.pdf) (2026) - Analyzes the landscape of cyber incidents impacting physical operations and critical infrastructure, documenting a notable shift in threat actor behavior throughout 2025. Key findings reveal a 25% reduction in total recorded breaches compared to 2024, yet nation-state and hacktivist attacks doubled during the same period, underscoring the persistent risk of sophisticated, deliberate targeting of industrial control systems.

### AI and Emerging Technologies
- [Akamai](https://www.akamai.com/lp/soti/app-api-ai-[security](/@harrisonqian/awesome/wiki/security/security)-report-2025) - [Fraud and Abuse Report](Annual%20Security%20Reports/2025/Akamai-Fraud-and-Abuse-Report-2025.pdf) (2025) - Investigates the evolving landscape of fraud and abuse driven by the rapid proliferation of [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) [bots](/@harrisonqian/awesome/wiki/miscellaneous/bots) and automated threat methodologies. Key findings reveal that AI bot traffic surged by 300 percent over the past year, while the commerce sector alone recorded more than 25 billion bot requests during a two month observation period.
- [Anthropic](https://www.anthropic.com/news/detecting-countering-misuse-aug-2025) - [Threat Intelligence Report](Annual%20Security%20Reports/2025/Anthropic-Threat-Intelligence-Report-2025.pdf) (2025) - Examines how threat actors are leveraging advanced AI models, particularly Claude, to escalate and refine their cyber operations. Key findings demonstrate AI is weaponized as an active agent in sophisticated attacks like vibe [hacking](/@harrisonqian/awesome/wiki/security/hacking) for data extortion, and significantly lowers the barrier for developing complex operations such as no-code ransomware.
- [Crown](https://internationalaisafetyreport.org/publication/international-ai-safety-report-2025) - [International AI Safety Report](Annual%20Security%20Reports/2026/Crown-International-AI-Safety-Report-2026.pdf) (2026) - Examines the evolution of general purpose [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence), focusing on the technical shift toward reasoning systems and the proliferation of autonomous agents. Key findings highlight that distillation techniques have significantly lowered barriers to entry, enabling the fine tuning of capable models like DeepSeek V3 for approximately 10,000 dollars, while also noting that reasoning systems remain computationally expensive and prone to occasional logic errors.
- [Google](https://cloud.google.com/blog/topics/threat-intelligence/threat-actor-usage-of-ai-tools/) - [Advances In Threat Actor Usage Of AI Tools](Annual%20Security%20Reports/2025/Google-Advances-in-Threat-Actor-Usage-of-AI-Tools-2025.pdf) (2025) - Focuses on the increasing use of AI tools by threat actors, highlighting a shift towards deploying novel AI-enabled malware in active operations. Key findings include the emergence of malware families using LLMs for dynamic code generation and obfuscation, threat actors employing social engineering to bypass AI safety guardrails, and a maturing cybercrime marketplace for AI tooling.
- [HumanSecurity](https://www.humansecurity.com) - [The State of AI Traffic and Cyberthreat Benchmark Report](Annual%20Security%20Reports/2026/HumanSecurity-The-State-of-AI-Traffic-and-Cyberthreat-Benchmark-Report-2026.pdf) (2026) - Examines the rapid evolution of internet traffic and the escalating threat landscape driven by the proliferation of [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) and automated systems. Data from over one quadrillion interactions reveals that AI-driven traffic grew by 187 percent in 2025, while agentic AI traffic surged by 7,851 percent year over year. These findings underscore a fundamental shift in digital [security](/@harrisonqian/awesome/wiki/security/security) as automated agents increasingly perform complex, autonomous transactions that challenge traditional methods of distinguishing legitimate human activity from malicious bot operations.
- [Imperva](https://www.imperva.com/resources/resource-library/reports/the-state-of-api-[security](/@harrisonqian/awesome/wiki/security/security)-in-2024/) - [API Security Threat Report](Annual%20Security%20Reports/2025/Imperva-API-Security-Threat-Report-2025.pdf) (2025) - Analyzes the evolving API threat landscape for H1 2025, detailing how attackers weaponize business logic flaws across 4,000 monitored environments to disrupt critical operations. Key findings include a record 40,000+ API incidents, a 40% rise in credential stuffing due to weak MFA, and the fact that while APIs comprise only 14% of the attack surface, they attract 44% of sophisticated bot traffic.
- [Intezer](https://intezer.com/2026-ai-soc-report-for-cisos/) - [AI SOC Report](Annual%20Security%20Reports/2026/Intezer-AI-SOC-Report-2026.pdf) (2026) - Analyzes the state of [security](/@harrisonqian/awesome/wiki/security/security) operations in 2025 by examining over 25 million alerts across global enterprise environments to identify critical gaps in threat detection and triage. Key findings reveal that nearly 2 percent of low-severity endpoint alerts represent genuine security incidents, demonstrating that current industry reliance on aggressive alert suppression frequently allows active threats to bypass traditional defense mechanisms.
- [Kela](https://www.kelacyber.com/resources/research/2025-ai-threat-report/) - [AI Threat Report](Annual%20Security%20Reports/2025/Kela-AI-Threat-Report-2025.pdf) (2025) - Analyzes the weaponization of AI by cybercriminals, focusing on emerging threats and attack vectors. Key findings reveal a 200% increase in mentions of malicious AI in 2024, highlighting the rapid growth of dark AI tools and their use in automated phishing, vulnerability research, and malware development.
- [Latio](https://latio.com) - [AI [Security](/@harrisonqian/awesome/wiki/security/security) Report](Annual%20Security%20Reports/2025/Latio-AI-Security-Report-2025.pdf) (2025) - Examines the multifaceted AI security landscape, aiming to clarify prevalent confusion around use cases and differentiate between existing and AI-native solutions. The report emphasizes that while many underlying security challenges are familiar, agentic AI architectures significantly elevate runtime risk due to their access to sensitive data and ability to take actions.
- [MNP](https://www.mnp.ca/en/insights/directory/risk-trends-in-2026-and-beyond) - [Risk Trends](Annual%20Security%20Reports/2026/MNP-Risk-Trends-2026.pdf) (2026) - Examines the evolving landscape of enterprise risk management, focusing on the compounding threats posed by [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence), climate change, and cybersecurity vulnerabilities. Key findings indicate that 65 percent of Canadian business leaders identify cyber risks as a top concern, while climate-related disasters have caused 30 billion dollars in cumulative insured losses over the last decade, necessitating a shift toward agile, scenario-based planning to maintain operational resilience.
- [Opswat](https://www.opswat.com/resources/reports/ponemon-state-of-file-security) - [State Of File [Security](/@harrisonqian/awesome/wiki/security/security) Report](Annual%20Security%20Reports/2025/Opswat-State-of-File-Security-Report-2025.pdf) (2025) - Examines the current state of file security, detailing prevalent threats, management practices, and the [integration](/@harrisonqian/awesome/wiki/platforms/integration) of advanced technologies. Key findings reveal that file-based breaches have already cost organizations an average of $2.7M over the past two years.
- [Pindrop](https://www.pindrop.com/research/report/voice-intelligence-[security](/@harrisonqian/awesome/wiki/security/security)-report/) - [Voice Intelligence And Security Report Report](Annual%20Security%20Reports/2025/Pindrop-Voice-Intelligence-and-Security-Report-Report-2025.pdf) (2025) - Examines the evolving landscape of voice intelligence and security, focusing on the impact of [generative AI](/@harrisonqian/awesome/wiki/computer-science/generative-ai) on fraud. Key findings reveal a more than 1,300% surge in deepfake attacks and a 26% increase in overall fraud attempts, with deepfake fraud projected to rise by 162% in 2025.
- [Reco](https://www.reco.ai/state-of-shadow-ai-report-form) - [State Of Shadow AI Report](Annual%20Security%20Reports/2025/Reco-State-of-Shadow-AI-Report-2025.pdf) (2025) - Examines the pervasive adoption and inherent [security](/@harrisonqian/awesome/wiki/security/security) risks of unsanctioned AI tools across enterprises. Key findings reveal OpenAI accounts for 53% of all shadow AI usage, while many popular tools lack fundamental security controls and persist unsanctioned for over 400 days on average.
- [ZScaler](https://www.zscaler.com/campaign/threatlabz-ai-[security](/@harrisonqian/awesome/wiki/security/security)-report) - [AI Security Report](Annual%20Security%20Reports/2025/Threatlabz-AI-Security-Report-2025.pdf) (2025) - Examines the multifaceted landscape of [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) in cybersecurity, covering AI/ML adoption trends, AI-driven threats, and essential security capabilities. Key findings highlight an exponential 36x year-over-year increase in AI/ML tool usage, with enterprises blocking nearly 60% of all AI/ML transactions due to data security concerns.
- [Zimperium](https://www.zimperium.com/global-mobile-threat-report/) - [Global Mobile Threat Report](Annual%20Security%20Reports/2025/Zimperium-Global-Mobile-Threat-Report-2025.pdf) (2025) - Analyzes the evolving global mobile threat landscape, detailing prevalent attack vectors targeting enterprise mobile devices and applications. Key findings highlight a surge in mobile phishing, the pervasive risk of unupgradable devices 25.3%, and the growing threat of sideloaded applications present on nearly a quarter of enterprise devices.

## Survey Reports

### Industry Trends
- [Accenture](https://www.accenture.com/us-en/insights/security/state-cybersecurity-2025) - [State of Cybersecurity Resilience](Annual%20Security%20Reports/2025/Accenture-State-of-Cybersecurity-2025.pdf) (2025) - Analyzes the widening gap between AI adoption and cybersecurity maturity across global enterprises. Key findings reveal only 13% of organizations possess advanced capabilities to defend against AI-driven threats, while just 10% have reached a proactive [security](/@harrisonqian/awesome/wiki/security/security) posture that significantly reduces attack risk and technical debt.
- [Allianz](https://commercial.allianz.com/content/dam/onemarketing/commercial/commercial/reports/allianz-risk-barometer-2026.pdf) - [Risk Barometer](Annual%20Security%20Reports/2026/Allianz-Risk-Barometer-2026.pdf) (2026) - Investigates the primary global business risks for 2026 by surveying 3,338 respondents across 97 countries to identify emerging threats and organizational vulnerabilities. Cyber incidents remain the leading global concern for the fifth consecutive year, maintaining a significant lead that is 10 percent higher than the rapidly escalating risk of [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence), which has climbed to the second position as organizations struggle with the complexities of digital [integration](/@harrisonqian/awesome/wiki/platforms/integration) and regulatory divergence.
- [Allianz](https://commercial.allianz.com/content/dam/onemarketing/commercial/commercial/reports/Allianz-Commercial-Cyber-[Security](/@harrisonqian/awesome/wiki/security/security)-Trends-2023.pdf) - [Commercial Cyber Security Trends](Annual%20Security%20Reports/2025/Allianz-Commercial-Cyber-Security-Trends-2025.pdf) (2025) - Examines the evolving landscape of cyber security resilience, focusing on the [integration](/@harrisonqian/awesome/wiki/platforms/integration) of [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) and the impact of stringent regulatory [frameworks](/@harrisonqian/awesome/wiki/front-end-development/frameworks) like the Digital Operational Resilience Act. Key findings indicate that the global cyber insurance market is projected to more than double to nearly 30 billion dollars by the end of the decade, driven by increased digitalization and the necessity for mid-sized firms to adopt robust risk management systems to meet emerging compliance [standards](/@harrisonqian/awesome/wiki/miscellaneous/standards).
- [Anthropic](https://resources.anthropic.com/2026-agentic-coding-trends-report) - [Agentic Coding Trends Report](Annual%20Security%20Reports/2026/Anthropic-Agentic-Coding-Trends-Report-2026.pdf) (2026) - Examines the evolution of agentic coding in 2026, focusing on the transition from individual AI assistants to coordinated multi-agent systems that manage complex software development lifecycles. Research indicates that while developers utilize AI in 60% of their daily tasks, they can only fully delegate 20% of their workload, highlighting the critical necessity for human oversight and strategic orchestration. These findings demonstrate that organizations leveraging multi-agent architectures can achieve significant operational efficiencies, such as reducing project timelines from months to weeks while maintaining high levels of technical accuracy and code quality.
- [Aon](https://www.aon.com/cyber-risk-report//) - [Global Cyber Risk Report](Annual%20Security%20Reports/2025/Aon-Global-Cyber-Risk-Report-2025.pdf) (2025) - Analyzes the global cyber risk landscape and the cyber insurance market, providing insights into cyber [security](/@harrisonqian/awesome/wiki/security/security) controls and event impacts. Key findings reveal a 22% increase in cyber claims frequency despite a 77% decline in average ransomware payouts, with mid-sized organizations filing the majority of claims.
- [Armis](https://www.armis.com) - [State of Cyberwarfare](Annual%20Security%20Reports/2026/Armis-State-of-Cyberwarfare-2026.pdf) (2026) - Investigates the evolving landscape of global cyberwarfare in 2026, focusing on the [integration](/@harrisonqian/awesome/wiki/platforms/integration) of agentic [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) into state-sponsored and criminal attack methodologies. Key findings reveal that 79 percent of IT decision-makers identify artificial intelligence as a significant [security](/@harrisonqian/awesome/wiki/security/security) threat, while 54 percent of organizations report being impacted by AI-led attacks within the past year as the mean time to compromise drops to seconds.
- [Artic Wolf Labs](https://cybersecurity.arcticwolf.com/2025-Trends-Report.html) - [The State Of Cybersecurity](Annual%20Security%20Reports/2025/ArticWolfLabs-State-of-Cybersecurity-Trends-Report-2025.pdf) (2025) - Analyzes the 2025 cybersecurity landscape, highlighting a pivotal shift in executive priorities and [incident response](/@harrisonqian/awesome/wiki/security/incident-response) preparedness. Key findings reveal that [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) has displaced ransomware as the top [security](/@harrisonqian/awesome/wiki/security/security) concern for 29% of respondents, even as 70% of organizations reported experiencing at least one significant cyber attack in the past year.
- [At Bay](https://www.at-bay.com/2025-insursec-report/) - [Insursec Report](Annual%20Security%20Reports/2025/Atbay-InsurSec-Report-2025.pdf) (2025) - Analyzes the relationship between technology choices and cyber risk using 2024 claims data, revealing a 16% increase in overall claim frequency driven by ransomware and third-party incidents. Key findings include a 19% resurgence in direct ransomware attacks, 80% of which exploited remote access tools and a 43% rise in indirect ransomware claims due to supply chain vulnerabilities.
- [ATIS](https://atis.org/resources/enhanced-5g-and-zero-trust-cloud-and-operational-[security](/@harrisonqian/awesome/wiki/security/security)-aspects/) - [Enhanced 5G And Zero Trust Cloud](Annual%20Security%20Reports/2025/ATIS-Enhanced-5G-and-Zero-Trust-Cloud-2025.pdf) (2025) - Analyzes the implementation and operational challenges of applying Zero Trust Architecture to 5G cloud environments, specifically addressing the infrastructure hosting the 5G [Core](/@harrisonqian/awesome/wiki/platforms/core), OSS/BSS, and Open [Radio](/@harrisonqian/awesome/wiki/miscellaneous/radio) Access Networks. Key findings from the ATIS study identify 12 required central security control groups essential for a resilient 5G ZTA, emphasizing that perimeter-based security is no longer sufficient for virtualized and cloud-native mobile networks.
- [Big ID](https://bigid.com/discovery-foundation/) - [Data Discovery And Classification Top 5](Annual%20Security%20Reports/2025/BigID-Data-Discovery-and-Classification-Top-5-2025.pdf) (2025) - Profiles BigID as a leading vendor in the 2025 data discovery and classification market, utilizing a ten-factor evaluation framework to assess its operational and technical maturity. Analysis highlights the platform's ability to automate sensitive data mapping through AI-driven technologies, achieving a high CVR rating of 8.1 while supporting critical compliance mandates like [GDPR](/@harrisonqian/awesome/wiki/security/gdpr) and HIPAA.
- [Binalyze](https://www.binalyze.com/cybersecurity-investigations-report-2025) - [The State Of Cybersecurity Investigations](Annual%20Security%20Reports/2025/Binalyze-The-State-of-Cybersecurity-Investigations-2025.pdf) (2025) - Analyzes the state of cybersecurity investigations within US enterprises, revealing significant gaps in crisis management [frameworks](/@harrisonqian/awesome/wiki/front-end-development/frameworks) and response capabilities. Key findings indicate that most organizations fail to learn from cyberattacks, leading to increased financial and reputational damage due to delayed and inconclusive investigations, exacerbated by a critical lack of skilled personnel.
- [Bitsight](https://www.bitsight.com/blog/uncovering-cyber-risks-global-supply-chain) - [Security Digitization And The Global Supply Chain](Annual%20Security%20Reports/2025/Bitsight-[Security](/@harrisonqian/awesome/wiki/security/security)-Digitization-and-the-Global-Supply-Chain-2025.pdf) (2025) - This report analyzes the complexity and inherent risks within the modern digital supply chain. By leveraging data from over 500,000 organizations and 61.5 million relationships, Bitsight maps the interconnectedness of the global economy to highlight where critical vulnerabilities lie. The central premise is that while digital collaboration drives efficiency, it creates vast webs of dependency that organizations often cannot fully control or see.
- [Black Duck](https://www.blackduck.com/resources/analyst-reports/state-of-embedded-software-quality-and-safety.html) - [State Of Embedded Software Quality And Safety](Annual%20Security%20Reports/2025/BlackDuck-State-of-Embedded-Software-Quality-and-Safety-2025.pdf) (2025) - Analyzes the evolving landscape of embedded software, highlighting the impact of AI adoption and software supply chain management. Key findings reveal a significant governance gap in AI implementation, the rise of SBOMs as a commercial imperative, and a disconnect between management and engineering perceptions of release success.
- [Black Duck](https://www.blackduck.com/blog/ai-in-[devsecops](/@harrisonqian/awesome/wiki/security/devsecops)-balancing-innovation-and-[security](/@harrisonqian/awesome/wiki/security/security).html) - [Balancing AI Usage And Risk](Annual%20Security%20Reports/2025/BlackDuck-Balancing-AI-Usage-and-Risk-in-2025.pdf) (2025) - Analyzes the current state of DevSecOps, focusing on the friction between development velocity and security automation. Key findings highlight that while high-velocity pipelines are common, security lags behind, with tool sprawl often overwhelming teams with noisy data and false positives.
- [Bridewell](https://www.bridewell.com/us/insights/white-papers/detail/operational-technology-cybersecurity-services) - [Cybersecurity in Critical National Infrastructure](Annual%20Security%20Reports/2026/Bridewell-Cybersecurity-in-Critical-National-Infrastructure-2026.pdf) (2026) - Analyzes the evolving cybersecurity landscape within United Kingdom critical national infrastructure, focusing on the transition from reactive awareness to proactive regulatory execution. Findings reveal that 93 percent of organizations experienced a cyber attack in the past year, while 35 percent of respondents now identify regulatory [frameworks](/@harrisonqian/awesome/wiki/front-end-development/frameworks) as the primary driver for [security](/@harrisonqian/awesome/wiki/security/security) maturity. As [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) adoption accelerates, organizations are increasingly prioritizing the governance of automated systems to mitigate risks associated with data protection and operational visibility in complex cloud environments.
- [Canada](https://www.secureworld.io/industry-news/state-of-cybersecurity-canada-2025) - [The State of Cybersecurity in Canada](Annual%20Security%20Reports/2025/Canada-The-State-of-Cybersecurity-in-Canada-2025.pdf) (2025) - Analyzes the evolving cybersecurity landscape in Canada, focusing on the critical risks posed by supply chain vulnerabilities, cloud misconfigurations, and a persistent national talent shortage. Key findings reveal that IoT and cloud misconfigurations account for 82% of data breaches, while the industry faces a significant workforce deficit with up to 25,000 unfilled cybersecurity positions expected in the near term.
- [Chainguard](https://www.chainguard.dev/2026-engineering-reality-report) - [Engineering Reality Report](Annual%20Security%20Reports/2026/Chainguard-Engineering-Reality-Report-2026.pdf) (2026) - Analyzes the current state of the developer experience, highlighting key challenges and opportunities for improvement. Key findings indicate that 72% of engineers struggle to find time for new feature development due to demands on their time, while AI and automation are significantly improving job satisfaction for those who leverage them.
- [Chainguard](https://www.chainguard.dev/unchained/the-state-of-trusted-open-source-december-2025) - [State Of Trusted Open Source](Annual%20Security%20Reports/2025/Chainguard-State-of-Trusted-Open-Source-2025.pdf) (2025) - Analyzes the state of trusted open source software consumption and its associated risks. Key findings reveal that 98% of vulnerabilities occur outside the top 20 most popular projects, highlighting significant [security](/@harrisonqian/awesome/wiki/security/security) burdens in [less](/@harrisonqian/awesome/wiki/front-end-development/less) visible software components.
- [Comcast](https://business.comcast.com/about-us/press-releases/2025/cb-releases-2025-cybersecurity-threat-report) - [Business Cybersecurity Threat Report](Annual%20Security%20Reports/2025/Comcast-Business-Cybersecurity-Threat-Report-2025.pdf) (2025) - Analyzes the 2025 cybersecurity threat landscape based on 34.6 billion detected events, highlighting evolving adversary tactics and the need for layered defense. Key findings reveal a significant increase in resource development activities, the prevalence of drive-by compromises as an initial access technique, and the growing sophistication of DDoS attacks.
- [ConnectEU](https://connecteurope.org/insights/reports/state-digital-communications-2025) - [State of Digital Communications](Annual%20Security%20Reports/2026/ConnectEU-State-of-Digital-Communications-2026.pdf) (2026) - Examines the state of the European digital communications ecosystem, highlighting significant gaps in infrastructure investment and global competitiveness. Key findings reveal that while 5G coverage reached 94.9 percent of the population in 2025, total sector capital expenditure declined by 2 percent to 64.6 billion euros, leaving 41.8 million Europeans projected to remain unserved by [fiber](/@harrisonqian/awesome/wiki/back-end-development/fiber) to the home by 2030.
- [Connectwise](https://vmblog.com/news/connectwise-2026-msp-threat-report-spotlights-how-identity-abuse-is-redefining-msp-risk/) - [MSP Threat Report](Annual%20Security%20Reports/2026/Connectwise-MSP-Threat-Report-2026.pdf) (2026) - Examines the evolving threat landscape for managed service providers, focusing on how adversaries exploit trusted identities, software supply chains, and user behavior to bypass traditional [security](/@harrisonqian/awesome/wiki/security/security) controls. Key findings reveal a 58 percent year over year increase in ransomware victim counts, alongside a significant rise in user mediated execution techniques like ClickFix that manipulate individuals into manually running malicious commands.
- [Cyber Edge](https://delinea.com/resources/cyberedge-cyberthreat-defense-report) - [Cyberthreat Defense Report](Annual%20Security%20Reports/2025/CyberEdge-Cyberthreat-Defense-Report-2025.pdf) (2025) - Analyzes the current state of cybersecurity defenses and the perceptions of IT [security](/@harrisonqian/awesome/wiki/security/security) professionals. Key insights reveal a plateauing trend in successful cyberattacks, a significant preference for AI in security products, and persistent challenges with the cybersecurity skills shortage.
- [Darktrace](https://www.darktrace.com/resources) - [The State Of Cybersecurity In The Finance Sector](Annual%20Security%20Reports/2025/Darktrace-The-State-of-Cybersecurity-in-the-Finance-Sector-2025.pdf) (2025) - Examines the state of cybersecurity in the finance sector, detailing evolving risks to confidentiality, integrity, and availability. Key findings reveal a significant increase in sophisticated phishing techniques like AiTM and [QR code](/@harrisonqian/awesome/wiki/miscellaneous/qr-code) phishing, alongside the growing impact of AI-generated attacks and persistent threats from state-sponsored actors and ransomware groups.
- [Duha](https://www.duha.co/reports/state-of-[security](/@harrisonqian/awesome/wiki/security/security)-vendors-rsac-2026/) - [State of Security Vendors RSAC](Annual%20Security%20Reports/2026/Duha-State-of-Security-Vendors-RSAC-2026.pdf) (2026) - Examines the current landscape of cybersecurity vendors at the RSA Conference, focusing on marketing trends, booth design strategies, and the prevalence of [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) terminology. Key findings reveal that 37 percent of the 607 observed exhibitors explicitly featured artificial intelligence in their messaging, while 8 percent of booths failed to clearly communicate their [core](/@harrisonqian/awesome/wiki/platforms/core) value proposition to security practitioners.
- [Elastic](https://www.elastic.co/resources/security/report/global-threat-report) - [Global Threat Report](Annual%20Security%20Reports/2025/Elastic-Global-Threat-Report-2025.pdf) (2025) - Analyzes the evolving landscape of cyber threats, highlighting a significant shift towards high-velocity attacks that weaponize trusted enterprise tools. Key insights reveal adversaries are prioritizing immediate execution over stealth, with [Windows](/@harrisonqian/awesome/wiki/platforms/windows) execution tactics doubling and cloud attacks concentrating on identity-based goals.
- [Elastic](https://www.elastic.co/security-labs/state-of-detection-engineering-at-elastic-2025) - [State Of Detection Engineering](Annual%20Security%20Reports/2025/Elastic-State-of-Detection-Engineering-2025.pdf) (2025) - Analyzes the practice of [detection engineering](/@harrisonqian/awesome/wiki/security/detection-engineering) within Elastic [Security](/@harrisonqian/awesome/wiki/security/security), detailing their approach to rule development and enhancement. Key findings highlight the impact of real-world threat analysis, automated rule validation, and the [Detection Engineering](/@harrisonqian/awesome/wiki/security/detection-engineering) Behavioral Maturity Model on improving threat detection capabilities.
- [Elvish](https://www.playhousesquare.org/) - [State Of Physical Security](Annual%20Security%20Reports/2026/Elvish-State-of-Physical-[Security](/@harrisonqian/awesome/wiki/security/security)-2026.pdf) (2026) - The report outlines how emerging technologies, shifting operational priorities, and closer coordination between physical security and IT teams are reshaping modern security programs. Key findings highlight stronger adoption of AI [analytics](/@harrisonqian/awesome/wiki/miscellaneous/analytics) and cloud platforms, a growing emphasis on responsible data practices, and a clear push for more integrated, collaborative security operations.
- [ENISA](https://www.enisa.europa.eu/publications/enisa-threat-landscape-2025) - [Threat Landscape Report](Annual%20Security%20Reports/2025/ENISA-Threat-Landscape-2025.pdf) (2025) - Outlines the organizational scope and collaborative foundation of the 2025 Threat Landscape report, dedicated to enhancing the Union's infrastructure and digital [security](/@harrisonqian/awesome/wiki/security/security). Key contributors include EEAS STRATCOM, Europol EC3, and various Information Sharing and Analysis Centers, emphasizing a cross-sector approach to identifying cyber challenges.
- [FAIR Institute](https://www.fairinstitute.org/state-of-crm-2025) - [State Of Cyber Risk Management Report](Annual%20Security%20Reports/2025/FAIRInstitute-State-Of-Cyber-Risk-Management-Report-2025.pdf) (2025) - Focuses on the evolution and current state of cyber risk management programs, based on a survey of 402 cyber risk professionals. The report highlights that mature CRM programs are more proactive, business-aligned, and deliver better outcomes, especially when leveraging FAIR methodology, automation, and AI, although challenges like cultural resistance and governance gaps persist.
- [FERMA](https://ferma.eu/wp-content/uploads/2025/10/Demystifying-Cyber-Insurance-todays-trends-tomorrows-challenges.pdf) - [Demystifying Cyber Insurance](Annual%20Security%20Reports/2025/FERMA-Demystifying-Cyber-Insurance-2025.pdf) (2025) - Analyzes the current state of the European cyber insurance market, identifying a transition from extreme volatility to a buyer-friendly environment characterized by softening rates and enhanced organizational resilience. Key findings highlight that while large enterprises have significantly improved their detection and response capabilities, a critical "cyber-resilience gap" persists for small and medium-sized enterprises, which account for 99% of European companies but have an insurance penetration rate of only 15%.
- [Forescout](https://www.forescout.com/research-labs/the-riskiest-devices-of-2025/) - [Riskiest Devices](Annual%20Security%20Reports/2025/Forescout-Riskiest-Devices-2025.pdf) (2025) - Analyzes millions of devices to identify the most vulnerable assets in enterprise networks, revealing that network equipment has overtaken endpoints as the riskiest IT category. Key findings highlight a 15% increase in industry-wide risk, the unprecedented addition of 12 new device types to the high-risk list, and a notable surge in unencrypted Telnet usage across government networks.
- [Forrester](https://www.forrester.com/report/the-forrester-wave-tm-iot-[security](/@harrisonqian/awesome/wiki/security/security)-solutions-q3-2025/RES185467) - [Iot Security Solutions Report](Annual%20Security%20Reports/2025/Forrester-IoT-Security-Solutions-Report-2025.pdf) (2025) - Evaluates the landscape of IoT security solutions for Q3 2025, categorizing top vendors like Nozomi Networks and Claroty into Leaders, Strong Performers, and Contenders. The report emphasizes that while asset discovery is foundational, effective security requires distinct vulnerability management strategies and rigorous policy [testing](/@harrisonqian/awesome/wiki/testing/testing) to avoid disrupting business operations.
- [Fortinet](https://www.fortinet.com/blog/industry-trends/inside-industrialization-of-cybercrime-what-to-expect-in-2026) - [Threat Predictions](Annual%20Security%20Reports/2026/Fortinet-Threat-Predictions-2026.pdf) (2026) - Analyzes the acceleration of cybercrime and its industrialization, highlighting the increasing speed and scale of attacks. Key insights reveal that AI-driven autonomous agents and the convergence of fraud and cybercrime will drive unprecedented operational throughput for adversaries, necessitating defensive strategies that operate at machine speed.
- [Google](https://cloud.google.com/resources/content/roi-of-ai-2025) - [Cloud ROI Of AI](Annual%20Security%20Reports/2025/Google-Cloud-ROI-of-AI-2025.pdf) (2025) - Focuses on the impact of AI agents on business value, highlighting the shift from predictive to agentic AI. The report finds that 88% of agentic AI early adopters are seeing a positive ROI on gen AI, driven by executive commitment and strategic deployment across various industries and use cases.
- [Google](https://services.google.com/fh/files/misc/cybersecurity-forecast-2026-en.pdf) - [Cybersecurity Forecast](Annual%20Security%20Reports/2026/Google-Cybersecurity-Forecast-2026.pdf) (2026) - Analyzes the evolving cybersecurity landscape for 2026, focusing on the impact of [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence), persistent cybercrime, and nation-state activities. Key insights reveal adversaries fully embracing AI for sophisticated attacks, a significant rise in ransomware and data theft extortion, and nation-states prioritizing long-term strategic cyber espionage.
- [GRF](https://www.grfcpa.com/resource/2026-top-risks-report/) - [Top Risks Report](Annual%20Security%20Reports/2026/GRF-Top-Risks-Report-2026.pdf) (2026) - Examines the primary strategic, cybersecurity, and operational risks facing nonprofits and government contractors in the Washington DC region during 2026. Key findings indicate that 58 percent of organizations report an increase or stability in attack frequency compared to the previous year, highlighting the urgent need for enhanced governance and resilience as 44 percent of compromises are driven by social engineering tactics.
- [GSMA](https://www.gsma.com/solutions-and-impact/technologies/security/gsma_resources/pq-05-post-quantum-[cryptography](/@harrisonqian/awesome/wiki/computer-science/cryptography)-for-5g-roaming-use-case/) - [Post Quantum Cryptography For 5g Roaming](Annual%20Security%20Reports/2025/GSMA-Post-Quantum-Cryptography-for-5G-Roaming-2025.pdf) (2025) - Analyzes the implications of Post Quantum [Cryptography](/@harrisonqian/awesome/wiki/computer-science/cryptography) for 4G and 5G roaming use cases, addressing threats and mitigation strategies against a Cryptographically Relevant Quantum Computer. The analysis extends to include existing [security](/@harrisonqian/awesome/wiki/security/security) mechanisms like Direct TLS and PRINS, while also outlining comprehensive migration strategies for Public Key Infrastructure, TLS 1.3, IKEv2/IPSec, and hybrid cryptography across various roaming scenarios.
- [Hiscox](https://www.hiscoxgroup.com/hiscox-cyber-readiness-report-2025) - [Cyber Readiness Report](Annual%20Security%20Reports/2025/Hiscox-Cyber-Readiness-Report-2025.pdf) (2025) - Examines the cybersecurity posture of 5,750 SMEs across multiple countries, focusing on the growing influence of [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) and the persistence of ransomware threats. Highlights that while 59% of businesses experienced an attack in the last year, a significant 94% are proactively increasing their [security](/@harrisonqian/awesome/wiki/security/security) investments to bolster resilience against these evolving risks.
- [ISACA](https://www.isaca.org/resources/state-of-cybersecurity) - [State Of Cybersecurity](Annual%20Security%20Reports/2025/ISACA-State-of-Cybersecurity-2025.pdf) (2025) - Analyzes the global cybersecurity landscape, focusing on workforce dynamics, diminishing budget optimism, and the expanding [integration](/@harrisonqian/awesome/wiki/platforms/integration) of [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence). Key findings reveal that adaptability has surpassed experience as the primary hiring qualification, while a widening soft skills gap of 59% and an aging demographic pose significant succession risks for the industry.
- [Kiteworks](https://www.kiteworks.com/data-[security](/@harrisonqian/awesome/wiki/security/security)-compliance-risk-annual-report/) - [Data Security Compliance Risk Annual Survey](Annual%20Security%20Reports/2025/Kiteworks-Data-Security-Compliance-Risk-Annual-Survey-2025.pdf) (2025) - This year’s findings reveal a stark truth: Organizations operating blind face exponentially higher risks than those with clear visibility and governance.
- [Kong](https://konghq.com/resources/reports/api-[security](/@harrisonqian/awesome/wiki/security/security)-ai-threats-it-leader-insights-2025) - [API Security Perspectives](Annual%20Security%20Reports/2025/Kong-API-Security-Perspectives-2025.pdf) (2025) - While 55% of organizations experienced an API security incident in the past year, 85% say they’re confident in their organization’s security capabilities. This confidence may be misplaced, given 77% acknowledge the potential for significant security risks from AI and LLM [integration](/@harrisonqian/awesome/wiki/platforms/integration) into their API ecosystem.
- [Mix Mode](https://mixmode.ai/state-of-ai-in-cyber-2025) - [State Of AI In Cybersecurity Report](Annual%20Security%20Reports/2025/MixMode-State-of-AI-in-Cybersecurity-Report-2025.pdf) (2025) - Analyzes the current state of AI adoption in cybersecurity, detailing its impact on threat detection and response capabilities. Key findings indicate that while AI significantly improves threat prioritization and SOC efficiency, organizations struggle with integrating AI into legacy systems and a growing need for internal expertise to validate vendor claims.
- [Momentum](https://strategyofsecurity.com/themes-from-momentum-cybers-2022-cybersecurity-almanac) - [Cybersecurity Almanac](Annual%20Security%20Reports/2025/Momentum-Cybersecurity-Almanac-2025.pdf) (2025) - Analyzes the cybersecurity M&A and capital markets landscape for 2025, detailing strategic activity across acquisitions, IPOs, and financings. Key insights reveal a record $119 billion in strategic activity, with strategic buyers dominating the market and an emerging two-tier market structure.
- [Nametag](https://www.go.nametag.co/2026-workforce-impersonation-report) - [Workforce Impersonation Report](Annual%20Security%20Reports/2026/Nametag-Workforce-Impersonation-Report-2026.pdf) (2026) - Focuses on insider threats and adaptation of Enterprise [security](/@harrisonqian/awesome/wiki/security/security) strategies. In 2025, a growing number of breaches that began with someone pretending to be a legitimate member of the workforce. Nearly every major breach now carries an element of impersonation.
- [NCC Group](https://www.nccgroup.com/resource-hub/cyber-threat-intelligence-reports/) - [Cyber Threat Intelligence Report](Annual%20Security%20Reports/2025/NCCGroup-Cyber-Threat-Intelligence-Report-2025.pdf) (2025) - Analyzes the October 2025 cyber threat landscape, highlighting a sharp reversal in ransomware trends and the rising prevalence of fileless malware techniques. Key findings include a 41% increase in global attacks driven largely by the Qilin group, the resurgence of LockBit with version 5.0, and the detection of the EggStreme strain targeting defense sectors.
- [NCC Group](https://www.fox-it.com/nl-en/the-hidden-opponent-cyber-threats-in-sport/) - [Cyber Threats in Sport](Annual%20Security%20Reports/2026/NCCgroup-Cyber-Threats-in-Sport-2026.pdf) (2026) - Examines the evolving cyber threat landscape within the global sports industry, focusing on the vulnerabilities created by rapid digital transformation and extensive connectivity. Research indicates that 70 percent of sports organizations experienced a cyber incident or breach, while the sector faces increasing risks from ransomware, ticketing fraud, and the exploitation of connected stadium infrastructure.
- [Net Diligence](https://netdiligence.com/cyber-claims-study-2025-report/) - [Cyber Claims Study](Annual%20Security%20Reports/2025/NetDiligence-Cyber-Claims-Study-2025.pdf) (2025) - Analyzes over 10,000 cyber insurance claims from 2020 to 2024 to evaluate the financial impact of incidents across small-to-medium enterprises and large organizations. Key findings reveal that ransomware and business email compromise remain the primary loss drivers, with ransomware payments reaching unprecedented levels of up to $75 million.
- [Netscout](https://www.netscout.com/threatreport/) - [DDoS Threat Intelligence Report](Annual%20Security%20Reports/2025/Netscout-DDoS-Threat-Intelligence-Report-2025.pdf) (2025) - Designed to quickly equip readers with actionable intelligence, it delivers insights critical for ongoing network operations and strategic planning. The digital battlefield of 2025 is defined by an unprecedented escalation in DDoS warfare, with more than 8 million attacks recorded in the first half alone.
- [Norton](https://newsroom.gendigital.com/norton-cyber-safety-report-2025) - [Cyber Safety Insights Report](Annual%20Security%20Reports/2025/Norton-Cyber-Safety-Insights-Report-2025.pdf) (2025) - Examines the cyber safety landscape for children, focusing on AI [integration](/@harrisonqian/awesome/wiki/platforms/integration) and cyberbullying trends. Key insights reveal that 36% of global parents notice their children using AI for companionship, while the US leads with 24% of children experiencing cyberbullying, often occurring on gaming platforms and via text.
- [Picus](https://www.picussecurity.com/blue-report) - [Blue Report](Annual%20Security%20Reports/2025/Picus-Blue-Report-2025.pdf) (2025) - Developed by Picus Labs, this annual study is based on over 160 million attack simulations performed on the Picus [Security](/@harrisonqian/awesome/wiki/security/security) Validation Platform, providing a comprehensive view of how security products and configurations perform across modern enterprise environments. The Blue Report 2025 is designed to serve as a practical guide for security teams and decision-makers aiming to mature their security.
- [Pillar](https://www.pillar.security/resources/the-state-of-attacks-on-genai) - [State Of Attacks On Genai](Annual%20Security%20Reports/2025/Pillar-State-of-Attacks-on-GenAI-2025.pdf) (2025) - Analyzes real-world attacks on [Generative AI](/@harrisonqian/awesome/wiki/computer-science/generative-ai) applications, revealing critical [security](/@harrisonqian/awesome/wiki/security/security) vulnerabilities. Key findings indicate a 90% data leakage rate in successful attacks, with adversaries requiring only 42 seconds and an average of 5 interactions to compromise systems.
- [Process Unity](https://info.processunity.com/resources-reports-state-of-third-party-risk-assessments-2026.html) - [State of Third Party Risk Assessments](Annual%20Security%20Reports/2026/ProcessUnity-State-of-Third-Party-Risk-Assessments-2026.pdf) (2026) - Examines the current state of third-party risk management programs and the maturity gap between organizational perception and operational reality. Data reveals that 90 percent of organizations experienced at least one third-party breach in the past year, while 63 percent of assessment processes require over 40 hours of manual effort to complete.
- [Proofpoint](https://www.proofpoint.com/us/blog/corporate-news/cyber-insecurity-[healthcare](/@harrisonqian/awesome/wiki/health-and-social-science/healthcare)-2025-why-cyber-safety-now-patient-safety) - [Cyber Insecurity Healthcare](Annual%20Security%20Reports/2025/Proofpoint-Cyber-Insecurity-Healthcare-2025.pdf) (2025) - Examining the ongoing cyber insecurity within the healthcare industry, detailing its financial repercussions and direct impact on patient care. Key findings indicate 93 percent of organizations experienced an average of 43 cyberattacks, with 72 percent reporting patient care disruption and the average cost of the most expensive incident reaching $3.9 million, alongside a 29 percent increase in mortality rates linked to these events.
- [Proofpoint](https://www.proofpoint.com/us/resources/threat-reports/data-[security](/@harrisonqian/awesome/wiki/security/security)-landscape-report) - [Data Loss Landscape](Annual%20Security%20Reports/2025/Proofpoint-Data-Loss-Landscape-2025.pdf) (2025) - Investigates the current state of enterprise data security, focusing on the prevalence of data loss incidents and the evolving risks introduced by [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) and agentic workflows. Key findings reveal that 85% of organizations experienced a data loss incident in the last 12 months, while a concentrated 1% of users are responsible for 76% of all data loss events.
- [Prophet](https://resources.prophetsecurity.ai/state-of-ai-in-[security](/@harrisonqian/awesome/wiki/security/security)-operations) - [State Of AI In Secops](Annual%20Security%20Reports/2025/Prophet-State-of-AI-in-SecOps-2025.pdf) (2025) - Focuses on the challenges and opportunities surrounding the adoption of AI in Security Operations Centers. The report reveals that a significant percentage of alerts are ignored, leading to critical breaches, and highlights the growing prioritization of AI for security to address alert fatigue and improve efficiency.
- [PWC](https://industrialcyber.co/reports/pwcs-2026-global-digital-trust-insights-report-flags-ot-iiot-and-talent-gaps-as-top-cybersecurity-challenges/) - [Global Digital Trust Insights Report](Annual%20Security%20Reports/2026/PWC-Global-Digital-Trust-Insights-Report-2026.pdf) (2026) - Assesses the global cyber risk landscape and the strategic shift toward proactive investment in response to geopolitical volatility and emerging technological threats. Surveys of 3887 business and technology leaders reveal that while 60 percent are prioritizing cyber risk investment, only 6 percent of organizations possess the comprehensive capability to withstand attacks across all surveyed vulnerabilities. These findings underscore a persistent gap between [security](/@harrisonqian/awesome/wiki/security/security) confidence and actual operational readiness in an era of increasing digital disruption.
- [Reco](https://www.reco.ai/state-of-shadow-ai-report) - [Shadow AI Report](Annual%20Security%20Reports/2025/Reco-Shadow-AI-Report-2025.pdf) (2025) - Examines the proliferation and risks of shadow AI within enterprises, detailing its impact on data [security](/@harrisonqian/awesome/wiki/security/security) and operational workflows. Key findings reveal that OpenAI accounts for 53% of all shadow AI usage, while popular tools like CreativeX and System.com demonstrate prolonged unsanctioned usage, exposing organizations to significant and persistent data security vulnerabilities.
- [SANS](https://www.sans.org/white-papers/sans-2025-threat-hunting-survey-advancements-threat-hunting-amid-ai-cloud-challenges) - [Cyber Threat Hunting Survey](Annual%20Security%20Reports/2025/SANS-Cyber-Threat-Hunting-Survey-2025.pdf) (2025) - Analyzes the decade-long evolution of threat hunting capabilities within organizations, addressing persistent challenges posed by AI adoption and cloud environments.
- [SANS](https://www.sans.org/white-papers/sans-2025-soc-survey) - [SOC Survey](Annual%20Security%20Reports/2025/SANS-SOC-Survey-2025.pdf) (2025) - Focuses on the structure, staffing, and challenges of modern [Security](/@harrisonqian/awesome/wiki/security/security) Operations Centers based on the 2025 SANS SOC Survey. Key findings reveal that while [core](/@harrisonqian/awesome/wiki/platforms/core) SOC functions remain consistent, there's a growing interest in cloud-native security operations, and geopolitical uncertainty is driving increased scrutiny around international data flows.
- [SANS](https://www.sans.org/webcasts/sans-2025-detection-and-response-survey-webcast-forum) - [Detection and Response Survey](Annual%20Security%20Reports/2025/SANS-Detection-and-Response-Survey-2025.pdf) (2025) - Surveys the current landscape of detection and response operations, focusing on how organizations manage escalating cloud complexity and persistent resource constraints. Data from the global respondent base indicates that banking, technology, and cybersecurity sectors each represent 17 percent of the total participants, reflecting a diverse cross section of industries struggling to balance automation with human expertise. These findings demonstrate that while organizations are shifting toward production level [machine learning](/@harrisonqian/awesome/wiki/computer-science/machine-learning), operational burdens like false positives continue to impede overall [security](/@harrisonqian/awesome/wiki/security/security) team efficiency and performance.
- [SANS](https://www.sans.org/blog/sans-2025-state-ics-[security](/@harrisonqian/awesome/wiki/security/security)-report-progress-pressure-path-resilience) - [State Of ICS Security](Annual%20Security%20Reports/2025/SANS-State-Of-ICS-Security-2025.pdf) (2025) - Examines the current state of industrial control systems and operational technology security by analyzing incident trends, regulatory impacts, and defensive maturity across critical infrastructure sectors. Key findings reveal that while 50 percent of incidents are detected within 24 hours, 19 percent of organizations require over a month to remediate, and regulated sites experience 50 percent fewer financial losses and safety impacts compared to their unregulated peers.
- [Search Light Cyber](https://slcyber.io/whitepapers-reports/the-correlation-between-dark-web-exposure-and-cybersecurity-risk/) - [The Correlation Between Dark Web Exposure And Cybersecurity Risk](Annual%20Security%20Reports/2025/SearchLightCyber-The-Correlation-Between-Dark-Web-Exposure-and-Cybersecurity-Risk-2025.pdf) (2025) - Analyzes the relationship between dark web exposure and organizational cybersecurity risk, utilizing data from over 9,000 organizations to validate the predictive nature of pre-attack intelligence. Key findings demonstrate a statistically significant correlation between dark web artifacts, such as market listings and forum chatter, and an increased probability of suffering a cyber insurance loss.
- [SISA Sappers](https://www.sisainfosec.com/infosec-reports/threat-report-h1-2025-by-sisa-sappers/) - [Report](Annual%20Security%20Reports/2025/SISAsappersThreat-Report-2025.pdf) (2025) - Analyzes the [security](/@harrisonqian/awesome/wiki/security/security) posture of the global financial ecosystem in H1 2025, focusing on the dual threat of sophisticated ransomware campaigns and the rapid weaponization of high-severity vulnerabilities. Identifies emerging financial fraud techniques such as NFCGate ATM [relay](/@harrisonqian/awesome/wiki/front-end-development/relay) attacks and offline HCE fraud, while detailing the active exploitation of critical flaws like CVE-2025-22457 by major threat groups including LockBit and Lazarus.
- [Sophos](https://www.sophos.com/en-us/resources/white-papers/state-of-ransomware-in-healthcare) - [State Of Ransomware In Healthcare](Annual%20Security%20Reports/2025/Sophos-State-of-Ransomware-in-[Healthcare](/@harrisonqian/awesome/wiki/health-and-social-science/healthcare)-2025.pdf) (2025) - Analyzes the state of ransomware in the healthcare sector during 2025, detailing the causes, consequences, and recovery experiences from attacks. Key findings include a 91% drop in the average ransom demand to $342K, a significant decrease in the data encryption rate to 34%, and 97% of victims successfully recovering encrypted data.
- [Splunk](https://www.[splunk](/@harrisonqian/awesome/wiki/big-data/splunk).com/en_us/campaigns/state-of-[security](/@harrisonqian/awesome/wiki/security/security).html) - [State Of Security](Annual%20Security%20Reports/2025/Splunk-State-of-Security-2025.pdf) (2025) - Examines the evolving challenges and future strategies for Security Operations Centers. Highlights that inefficiencies, primarily from excessive tool maintenance and alert overload, significantly hinder operations, while AI is becoming a key driver for efficiency despite prevalent trust concerns.
- [Tailscale](https://tailscale.com/resources/report/zero-trust-report-2025) - [State of Zero Trust](Annual%20Security%20Reports/2025/Tailscale-State-of_Zero-Trust-2025.pdf) (2025) - Focuses on the current state of Zero Trust adoption, highlighting the challenges and frustrations faced by IT, [security](/@harrisonqian/awesome/wiki/security/security), and engineering teams. Key insights reveal that fewer than one-third of organizations employ identity-based access as their primary model, while 83% of personnel admit to circumventing security measures to maintain [productivity](/@harrisonqian/awesome/wiki/work/productivity).
- [Trelllix](https://www.trellix.com/platform/threat-intelligence/) - [Advanced Threat Research Report](Annual%20Security%20Reports/2025/Trelllix-Advanced-Threat-Research-Report-2025.pdf) (2025) - Analyzes the intense escalation of the global cyber threat landscape between April and September 2025, detailing the evolving tradecraft of Advanced Persistent Threats and the rising adoption of AI-powered malware. Key findings highlight a strategic focus on the telecommunications sector, which attracted over 70% of APT activity, and the emergence of malware-[less](/@harrisonqian/awesome/wiki/front-end-development/less) infiltration techniques where state-sponsored operatives are hired as legitimate IT staff.
- [Vanta](https://www.vanta.com/state-of-trust/global) - [State Of Trust Report](Annual%20Security%20Reports/2025/Vanta-State-of-Trust-Report-2025.pdf) (2025) - Analyzes the current state of trust in businesses, highlighting the impact of AI on risk, compliance, and [security](/@harrisonqian/awesome/wiki/security/security). The report reveals a significant AI readiness gap, with adoption outpacing expertise, and emphasizes the increasing importance of governed automation and continuous monitoring to address rising threats and maintain customer trust.
- [Verizon](https://www.verizon.com/business/resources/reports/mobile-[security](/@harrisonqian/awesome/wiki/security/security)-index/) - [Mobile Security Index](Annual%20Security%20Reports/2025/Verizon-Mobile-Security-Index-2025.pdf) (2025) - Examines the intersection of AI-driven risks and human decision-making within the mobile security landscape, utilizing survey data from 762 professionals to benchmark industry resilience. Key insights highlight the critical necessity of mobile device management and hybrid mesh architectures to mitigate the disruptive impacts of deepfakes and persistent human error in hyperconnected environments.
- [Viking Cloud](https://www.vikingcloud.com/resources/the-2025-cyber-threat-landscape-report-cyber-risks-opportunities-resilience) - [Cyber Threat Landscape](Annual%20Security%20Reports/2025/VikingCloud-Cyber-Threat-Landscape-2025.pdf) (2025) - Analyzes the evolving cyber threat landscape, highlighting concerns among cybersecurity leaders. Key findings reveal a significant rise in AI-driven attacks and insider threats, coupled with underreporting of incidents and a growing reliance on outsourced [security](/@harrisonqian/awesome/wiki/security/security) solutions.
- [WEF](https://www.wef.com) - [Global Risks Report](Annual%20Security%20Reports/2025/WEF-Global-Risks-Report-2025.pdf) (2025) - Analyzes the evolving global risk landscape through the collective insights of over 900 experts to identify critical threats across geopolitical, environmental, and technological domains. Key findings reveal that 52 percent of respondents anticipate an unsettled global outlook over the next two years, while 62 percent expect turbulent or stormy conditions over the 10 year horizon, driven largely by the persistent impact of misinformation and escalating societal polarization.
- [Wipro](https://www.wipro.com/cybersecurity/reports/state-of-cybersecurity-report-2025/) - [State Of Cybersecurity Report](Annual%20Security%20Reports/2025/Wipro-State-Of-Cybersecurity-Report-2025.pdf) (2025) - Analyzes the cybersecurity landscape, focusing on nation-state cyber warfare and data breaches. The report reveals that 86% of nation-state attacks are espionage-related, with intellectual property theft as the primary motive, and a rise in breaches targeting advanced PII, particularly in the technology, BFSI, and [healthcare](/@harrisonqian/awesome/wiki/health-and-social-science/healthcare) sectors.
- [World Economic Forum](https://www.weforum.org/publications/global-cybersecurity-outlook-2026/) - [Global Cybersecurity Outlook](Annual%20Security%20Reports/2026/WEF-Global-Cybersecurity-Outlook-2026.pdf) (2026) - Analyzes the global cybersecurity landscape in 2026, focusing on the impact of AI, geopolitics, and cybercrime. Key findings reveal that 94% of respondents anticipate AI will be the most significant driver of change, while 87% identified AI-related vulnerabilities as the fastest-growing cyber risk.
- [Yubico](https://www.yubico.com/resource/global-state-of-authentication-survey-2025-perception-vs-reality/) - [Global State Of Authentication Report](Annual%20Security%20Reports/2025/Yubico-Global-State-of-Authentication-Report-2025.pdf) (2025) - Analyzes global authentication habits and the persistent perception-reality gap between employee [security](/@harrisonqian/awesome/wiki/security/security) beliefs and modern cyber vulnerabilities. Key findings from the survey of 18,000 employed adults reveal that 40% of employees have never received cybersecurity training, and 62% of organizations still rely primarily on vulnerable username and password credentials.
- [Zscaler](https://www.zscaler.com/blogs/security-research/threatlabz-2025-vpn-report-why-81-organizations-plan-adopt-zero-trust-2026) - [Threatlabz VPN Risk Report](Annual%20Security%20Reports/2025/ZScaler-Threatlabz-VPN-Risk-Report-2025.pdf) (2025) - Examines the increasing obsolescence of traditional VPNs due to mounting [security](/@harrisonqian/awesome/wiki/security/security) vulnerabilities and the accelerated adoption of zero trust architectures. Key findings indicate that 56% of organizations suffered VPN-related attacks in the past year, prompting 65% of enterprises to plan a complete removal of VPN services by 2026.

### Executive Perspectives
- [Arkose Labs](https://www.arkoselabs.com/resource/2026-agentic-ai-[security](/@harrisonqian/awesome/wiki/security/security)-report/) - [The Agentic AI Security Report](Annual%20Security%20Reports/2026/ArkoseLabs-The-Agentic-AI-Security-Report-2026.pdf) (2026) - Analyzes the security risks and operational challenges posed by the rapid [integration](/@harrisonqian/awesome/wiki/platforms/integration) of autonomous AI agents within enterprise environments. Findings from a survey of 300 global enterprise leaders reveal that 97 percent anticipate a material AI agent driven security incident within the next 12 months, yet only 26 percent possess high confidence in their ability to definitively attribute such incidents to autonomous systems.
- [BioCatch](https://www.biocatch.com/resources) - [Digital Banking Fraud Trends in Thailand](Annual%20Security%20Reports/2026/BioCatch-Digital-Banking-Fraud-Trends-in-Thailand-2026.pdf) (2026) - Examines the current landscape of digital banking fraud in Thailand, focusing on the operational challenges posed by social engineering scams and the proliferation of mule account networks. Key findings indicate that 80% of surveyed banking leaders estimate annual fraud losses exceed 5 million dollars, while 71% of institutions report that existing fraud solutions generate false positive rates exceeding 40%.
- [CSC](https://www.cscdbs.com/en/resources-news/2025-ciso-cybersecurity-outlook-report/) - [The Chief Information [Security](/@harrisonqian/awesome/wiki/security/security) Officer Outlook](Annual%20Security%20Reports/2025/CSC-The-Chief-Information-Security-Officer-Outlook-2025.pdf) (2025) - Analyzes the cybersecurity concerns of CISOs in 2025, highlighting the increasing complexity and intensity of threats, particularly domain-related attacks.
- [Cyentia](https://www.cyentia.com/press/) - [CISO Engagement Study](Annual%20Security%20Reports/2025/Cyentia-CISO-Engagement-Study-2025.pdf) (2025) - Focuses on how cybersecurity buyers engage with AI driven topics, evolving content formats, and shifting sponsor behavior across global regions and industries. The data shows AI dominates user interest, OT [security](/@harrisonqian/awesome/wiki/security/security) is underserved despite growing demand, webinars lead CISO engagement, and timely topic alignment like ransomware, cloud, and identity sharply improves visibility and campaign performance.
- [Hitch Partners](https://www.hitchpartners.com/ciso-survey-results-26) - [Global CISO Leadership Report](Annual%20Security%20Reports/2026/HitchPartners-Global-CISO-Leadership-Report-2026.pdf) (2026) - Analyzes [security](/@harrisonqian/awesome/wiki/security/security) findings and threat trends reported by Hitch Partners for 2026, examining key attack patterns, vulnerability data, and defensive recommendations. Based on an analysis of over 625 security leaders, the report highlights that CISOs are increasingly managing both risk and innovation, particularly as AI moves into production environments.
- [Kibu](https://www.kibu.com) - [Quarterly Threat Report Q1](Annual%20Security%20Reports/2026/Kibu-Quarterly-Threat-Report-Q1-2026.pdf) (2026) - Examines the evolving threat of North Korean state-sponsored fake employee schemes, which leverage sophisticated social engineering and [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) to infiltrate organizations. Key findings reveal that 98% of successful cyber intrusions.
- [Proofpoint](https://www.proofpoint.com/us/resources/white-papers/voice-of-the-ciso-report) - [Voice of the CISO Report](Annual%20Security%20Reports/2025/Proofpoint-Voice-of-the-CISO-Report-2025.pdf) (2025) - Examines the challenges, expectations, and priorities of CISOs in 2025, focusing on the impact of AI and persistent threats. The report reveals a growing concern among CISOs regarding potential cyberattacks and data loss, despite confidence in their cybersecurity culture, highlighting the need for enhanced data protection measures and addressing human-related risks.
- [Salt](https://content.salt.security/OstermanReport_LP.html) - [CISO and CIO Investment Priorities](Annual%20Security%20Reports/2025/Salt-CISO-and-CIO-Investment-Priorities-2025.pdf) (2025) - Surveys key cybersecurity investment priorities for CISOs and CIOs in 2025, as detailed in a white paper by Osterman Research and sponsored by Salt [Security](/@harrisonqian/awesome/wiki/security/security). Key findings highlight shifts in priorities based on evolving threat landscapes and increased focus on [incident response](/@harrisonqian/awesome/wiki/security/incident-response) and proactive security measures.
- [Splunk](https://investor.cisco.com/news/news-details/2026/Splunk-Report-Agentic-AI-Takes-Center-Stage-in-CISOs-Path-to-Digital-Resilience/default.aspx) - [CISO Report](Annual%20Security%20Reports/2026/Splunk-CISO-Report-2026.pdf) (2026) - Assesses the evolving responsibilities and strategic challenges faced by modern [security](/@harrisonqian/awesome/wiki/security/security) leaders in an increasingly complex digital landscape. Key findings indicate that 78 percent of security executives now express significant concern regarding personal liability for security incidents, while 96 percent have assumed direct responsibility for [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) governance and risk management within their organizations.
- [Team8](https://team8.vc/rethink/enterprise/ciso-survey-2025/) - [CISO Survey](Annual%20Security%20Reports/2025/Team8-CISO-Survey-2025.pdf) (2025) - Outlines critical trends and strategic imperatives shaping the future of cybersecurity, based on the 2025 CISO Village Survey. Notable findings reveal record cybersecurity budget increases, a dual perception of AI as both a threat and a defensive tool, and heightened CISO personal liability amidst stringent regulatory changes.
- [Wiz](https://www.wiz.io/reports/ciso-[security](/@harrisonqian/awesome/wiki/security/security)-budget-benchmark-2026) - [CISO Budget Survey Report](Annual%20Security%20Reports/2026/Wiz-CISO-budget-survey-report-2026.pdf) (2026) - Analyzes the 2026 CISO Budget Benchmark survey, highlighting current spending trends and priorities in cybersecurity. Key findings reveal that while budgets are increasing, 56% of professionals believe they are insufficient, with cloud complexity and tool sprawl identified as major inhibitors to security effectiveness.

### Workforce and Culture
- [CompTIA](https://www.comptia.org/content/research/cybersecurity-trends-research) - [State of Cybersecurity](Annual%20Security%20Reports/2025/Comptia-State-of-Cybersecurity-2025.pdf) (2025) - Analyzes the current state of cybersecurity, focusing on organizational priorities, incident impact, and workforce development needs. Key findings reveal that cybersecurity is a high priority for 59% of organizations, yet 56% experienced significant incident impact, highlighting a critical skills gap and the growing influence of [generative AI](/@harrisonqian/awesome/wiki/computer-science/generative-ai) on cybersecurity strategies.
- [CompTIA](https://www.comptia.org/en-us/resources/research/state-of-the-tech-workforce-2026/) - [State of the Tech Workforce](Annual%20Security%20Reports/2026/CompTIA-State-of-the-Tech-Workforce-2026.pdf) (2026) - Analyzes the state of the United States technology workforce by examining employment trends, economic impact, and the [integration](/@harrisonqian/awesome/wiki/platforms/integration) of [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) across various industry sectors. Key findings indicate that net tech employment reached approximately 9,597,888 workers in 2025, while hiring for dedicated artificial intelligence professionals surged by 81 percent year over year as organizations prioritize digital fluency and technical skill development.
- [Fortinet](https://www.fortinet.com/content/dam/fortinet/assets/reports/2025-cybersecurity-skills-gap-report.pdf) - [Cybersecurity Skills Gap Report](Annual%20Security%20Reports/2025/Fortinet-Cybersecurity-Skills-Gap-Report-2025.pdf) (2025) - Investigates the global cybersecurity skills gap and the evolving influence of [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) on organizational risk management through a survey of 1850 international IT decision makers. Findings reveal that 86 percent of organizations experienced at least one breach in 2024, while 48 percent of leaders identify a critical lack of staff expertise as the primary barrier to successfully integrating artificial intelligence into their [security](/@harrisonqian/awesome/wiki/security/security) operations.
- [ISACA](https://www.isaca.org/resources/reports/state-of-privacy-2025) - [State of Privacy](Annual%20Security%20Reports/2025/ISACA-State-of-Privacy-2025.pdf) (2025) - Outlines key trends in global privacy practices, including staffing needs, budget constraints, and the increasing [integration](/@harrisonqian/awesome/wiki/platforms/integration) of AI in privacy operations. Key findings reveal significant skill gaps and difficulties in staff retention, coupled with increasing reliance on AI for privacy initiatives and a growing concern over privacy breaches.
- [Mimecast](https://www.mimecast.com/resources/ebooks/state-of-human-risk-2025/) - [The State Of Human Risk](Annual%20Security%20Reports/2025/Mimecast-The-State-of-Human-Risk-2025.pdf) (2025) - Analyzes the state of human risk in cybersecurity, highlighting its growing prominence over technology gaps. Key findings indicate that despite increased budgets, organizations still face significant challenges with human error, collaboration tool [security](/@harrisonqian/awesome/wiki/security/security), and the evolving threat landscape driven by AI.
- [N2K](https://www.n2k.com/wicys) - [Wicys Cyber Talent Study](Annual%20Security%20Reports/2025/N2K-WiCyS-Cyber-Talent-Study-2025.pdf) (2025) - Analyzes the strategic collaboration between N2K Networks and Women in CyberSecurity WiCyS to map member skills against the NICE Workforce Framework. Key findings highlight the exceptional alignment of WiCyS members' capabilities with industry [standards](/@harrisonqian/awesome/wiki/miscellaneous/standards), establishing new benchmarks for professional development and workforce diversification.

### Market and Investment Research
- [Altitude](https://www.altitudecyber.com/resources/altitude-cyber-market-reviews) - [Cyber Cybersecurity Market Review](Annual%20Security%20Reports/2025/Altitude-Cyber-Cybersecurity-Market-Review-2025.pdf) (2025) - Analyzes the cybersecurity market landscape, focusing on M&A and financing activities. Key insights reveal a significant surge in M&A deal volume, driven by large strategic acquisitions, alongside continued growth in financing deal counts despite a slight dip in overall volume.
- [ClairfieldInternational](https://www.clairfieldinternational.com) - [Cybersecurity Sector Report](Annual%20Security%20Reports/2026/ClairfieldInternational-Cybersecurity-Sector-Report-2026.pdf) (2026) - Examines the cybersecurity market landscape in 2025, focusing on record-breaking merger and acquisition activity alongside shifting valuation trends. The sector recorded 400 deals with a total disclosed value exceeding 84 billion dollars, while Israeli cybersecurity firms achieved a historic exit value of 72.6 billion dollars, representing a 1,500 percent increase over the previous year. These findings demonstrate significant market consolidation and a strong strategic appetite for high-growth, AI-enabled [security](/@harrisonqian/awesome/wiki/security/security) solutions despite broader macroeconomic pressures and sector-specific performance fluctuations.
- [Cybersecurity Ventures](https://cybersecurityventures.com/cybersecurity-almanac-2025/) - [Cybersecurity Market Report Q4](Annual%20Security%20Reports/2025/Cybersecurityventures-Cybersecurity-Market-Report-Q4-2025.pdf) (2025) - Analyzes the global cybersecurity market trajectory, projecting that annual spending will reach one trillion dollars by 2031 due to the expanding threat landscape across digitized infrastructure and industrial systems. Key findings indicate that global cybersecurity spending is expected to hit 454 billion dollars in 2025, while non-CISO cybersecurity expenditures are projected to grow at a 24 percent compound annual growth rate over the next three years as organizations increasingly decentralize their [security](/@harrisonqian/awesome/wiki/security/security) budgets.
- [Gallagher](https://www.ajg.com/news-and-insights/) - [Cyber Insurance Market Outlook](Annual%20Security%20Reports/2026/Gallagher-Cyber-Insurance-Market-Outlook-2026.pdf) (2026) - Examines the evolving cyber insurance market and the complex threat landscape, highlighting how increased capacity and carrier competition have stabilized pricing despite rising systemic risks. Key findings reveal that while ransomware payment rates dropped to between 28% and 32% in 2025, the industry faces mounting pressure from non-breach privacy litigation and emerging [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) [security](/@harrisonqian/awesome/wiki/security/security) incidents that threaten to reshape underwriting [standards](/@harrisonqian/awesome/wiki/miscellaneous/standards).
- [Guy Carpenter](https://www.guidewire.com/resources/blog/technology/2025-cyber-market-unveiled-cyence-and-guy-carpenter-deliver-industry-exposure-[database](/@harrisonqian/awesome/wiki/databases/database)-insights) - [US Cyber Industry Exposure Database](Annual%20Security%20Reports/2025/GuyCarpenter-US-Cyber-Industry-Exposure-Database-2025.pdf) (2025) - Analyzes the US cyber industry exposure and loss curve for 2025, detailing market conditions and providing benchmarks for risk transfer. Key findings indicate a heightened risk landscape due to deregulation and nation-state activity, necessitating updated exposure estimates for financial and insurance markets.
- [IT Harvest](https://it-harvest.com/) - [State Of Cyber](Annual%20Security%20Reports/2025/IT-Harvest-State-of-Cyber-H1-2025.pdf) (2025) - Examines the performance and key trends of the global cybersecurity industry during H1 2025. Key insights include an overall market contraction of 6.4% in vendor growth, juxtaposed with AI [Security](/@harrisonqian/awesome/wiki/security/security) emerging as a dominant sector, comprising nearly one in three new startups.
- [Recorded Future](https://www.recordedfuture.com/blog/introducing-the-2025-state-of-threat-intelligence-report) - [State Of Threat Intelligence](Annual%20Security%20Reports/2025/RecordedFuture-State-of-Threat-Intelligence-2025.pdf) (2025) - Analyzes the adoption and maturity of threat intelligence within enterprise cybersecurity, focusing on investment trends and strategic decision-making. Key findings reveal that 76% of organizations invest over $250,000 annually, with 91% planning to increase spending in 2026 to support dedicated teams and enhance detection capabilities.
- [UKCyber](https://cyberexchange.uk.net/news/cyber-[security](/@harrisonqian/awesome/wiki/security/security)-sectoral-analysis-report-2025) - [Security Sectoral Analysis Report](Annual%20Security%20Reports/2025/UKCyber-Security-Sectoral-Analysis-Report-2025.pdf) (2025) - Analyzes the economic performance and growth trajectory of the United Kingdom cyber security sector through a comprehensive assessment of 2,165 active firms. Findings indicate robust expansion across the industry, with total annual revenue reaching 13.2 billion pounds and a 21 percent increase in gross value added to 7.8 billion pounds. Employment within the sector has also experienced significant momentum, rising by 11 percent over the past year to reach a total of 67,299 full time equivalent roles.

### Application Security
- [AppOmni](https://appomni.com/reports/state-of-saas-security/) - [State Of Saas [Security](/@harrisonqian/awesome/wiki/security/security) Report](Annual%20Security%20Reports/2025/AppOmni-State-of-SaaS-Security-Report-2025.pdf) (2025) - Analyzes the state of SaaS security in 2025, revealing a surge in security incidents despite organizations expressing confidence in their security posture. Key findings indicate a disconnect between perceived visibility and actual risk reduction, with 75% of organizations experiencing a SaaS-related security incident and a reliance on trust in SaaS vendors rather than internal validation.
- [BlackDuck](https://news.blackduck.com/2026-02-04-Black-Duck-Releases-BSIMM16-Revealing-AI-and-Regulatory-Compliance-Reshaping-Application-[Security](/@harrisonqian/awesome/wiki/security/security)-Processes) - [BSIMM16](Annual%20Security%20Reports/2026/BlackDuck-BSIMM16-2026.pdf) (2026) - Analyzes the maturity and evolution of software security initiatives across diverse industry verticals by documenting observed development practices. Studies conducted on 111 participating organizations reveal that successful programs prioritize scaling security activities through automated [testing](/@harrisonqian/awesome/wiki/testing/testing) and the [integration](/@harrisonqian/awesome/wiki/platforms/integration) of security checkpoints into the development lifecycle.
- [Checkmarx](https://checkmarx.com/report-future-of-appsec-2025/) - [Future Of Application Security](Annual%20Security%20Reports/2025/Checkmarx-Future-of-Application-[Security](/@harrisonqian/awesome/wiki/security/security)-2025.pdf) (2025) - Analyzes the current state and future challenges of [application security](/@harrisonqian/awesome/wiki/security/application-security) amidst rapid developer velocity and the pervasive [integration](/@harrisonqian/awesome/wiki/platforms/integration) of AI in development workflows.
- [Cycode](https://cycode.com/state-of-aspm-2025/) - [State of [Application Security](/@harrisonqian/awesome/wiki/security/application-security) Posture Management](Annual%20Security%20Reports/2025/Cycode-State-of-Application-[Security](/@harrisonqian/awesome/wiki/security/security)-Posture-Management-2025.pdf) (2025) - Examines [application security](/@harrisonqian/awesome/wiki/security/application-security) challenges and strategies from the perspectives of CISOs, AppSec Directors, and [DevSecOps](/@harrisonqian/awesome/wiki/security/devsecops) managers across the UK, US, and Germany. Key findings reveal inefficiencies strain the relationship between security and development teams, eroding trust and hindering [productivity](/@harrisonqian/awesome/wiki/work/productivity).
- [Cypress Data Defense](https://cypressdatadefense.com/reports/2025-state-of-application-security) - [State of Application Security](Annual%20Security%20Reports/2025/Cypress-State-of-Application-[Security](/@harrisonqian/awesome/wiki/security/security)-2025.pdf) (2025) - Analyzes the state of [application security](/@harrisonqian/awesome/wiki/security/application-security) and its impact on product velocity, revealing significant challenges in detection and [integration](/@harrisonqian/awesome/wiki/platforms/integration). Key findings indicate that 62% of companies ship insecure code, 60% experience release delays due to security issues, and 83% are open to outsourcing application security.
- [Traceable](https://www.traceable.ai/2025-state-of-api-security) - [Global State of API Security](Annual%20Security%20Reports/2025/Traceable-Global-State-of-API-[Security](/@harrisonqian/awesome/wiki/security/security)-2025.pdf) (2025) - Annual survey gathering insights from 1,548 respondents across 100+ countries on the state of API security. Key findings reveal a persistent increase in API-related breaches, the inadequacy of traditional security solutions, and the growing risk posed by bot attacks and the [integration](/@harrisonqian/awesome/wiki/platforms/integration) of [generative AI](/@harrisonqian/awesome/wiki/computer-science/generative-ai).

### Cloud Security
- [Checkpoint](https://www.checkpoint.com/resources/items/report-cloud-[security](/@harrisonqian/awesome/wiki/security/security)-report-2025) - [Cloud Security Report](Annual%20Security%20Reports/2025/CheckPoint-Cloud-Security-Report-2025.pdf) (2025) - Focuses on the escalating cloud security challenges organizations face, including fragmented environments and outdated defenses. The report reveals that cloud-related breaches are rising, detection is largely reactive, and slow remediation extends risk exposure, highlighting the need for unified, intelligent, and automated defenses.
- [Crowd Strike](https://www.crowdstrike.com/en-us/resources/reports/frost-sullivan-recognizes-adaptive-shield-saas-[security](/@harrisonqian/awesome/wiki/security/security)-innovation/) - [SaaS Security Posture Management](Annual%20Security%20Reports/2025/Crowdstrike-SaaS-Security-Posture-Management-2025.pdf) (2025) - Analyizes the 2024 SaaS Security Posture Management market, benchmarking companies' innovation and growth potential. Key findings highlight a competitive landscape with significant growth opportunities and best practices for companies seeking to improve their security posture.
- [Fortinet](https://www.fortinet.com) - [Cloud [Security](/@harrisonqian/awesome/wiki/security/security) Report](Annual%20Security%20Reports/2026/Fortinet-Cloud-Security-Report-2026.pdf) (2026) - Analyzes the state of cloud security by surveying 1,163 cybersecurity leaders to evaluate the impact of infrastructure complexity on organizational risk and operational maturity. Key findings reveal that 69% of organizations identify tool sprawl and visibility gaps as their primary security barrier, while 74% report an active shortage of qualified professionals, leaving 66% of teams without confidence in their ability to detect and respond to threats in real time.
- [Google](https://cloud.google.com/security/resources/cybersecurity-forecast) - [Cybersecurity Forecast 2025](Annual%20Security%20Reports/2025/Google-Cybersecurity-Forecast-2025.pdf) (2025) - Insights from [Google Cloud](/@harrisonqian/awesome/wiki/platforms/google-cloud) leaders on emerging cybersecurity trends. Key predictions include the continued rise of ransomware and multifaceted extortion, the increasing use of AI by attackers, and the persistent threat from state-sponsored actors like China, Russia, Iran, and North Korea.
- [Prowler](https://prowler.com/state-of-cloud-[security](/@harrisonqian/awesome/wiki/security/security)-2026) - [State of Cloud Security Report](Annual%20Security%20Reports/2026/Prowler-State-of-Cloud-Security-Report-2026.pdf) (2026) - Investigates the current state of cloud security operations and the practical [integration](/@harrisonqian/awesome/wiki/platforms/integration) of [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) within modern enterprise environments. Findings reveal that security teams manage an average of 71 incidents per week, while 42 percent of professionals identify talent shortages as the primary barrier to achieving effective automation and operational maturity.

### Identity Security
- [CyberArk](https://www.cyberark.com/state-of-machine-identity-[security](/@harrisonqian/awesome/wiki/security/security)-report/) - [State of Machine Identity Security Report](Annual%20Security%20Reports/2025/CyberArk-State-of-Machine-Identity-Security-Report-2025.pdf) (2025) - Focuses on the critical and often-overlooked area of machine identity security. Key findings reveal that a significant percentage of organizations are concerned about risks stemming from compromised machine identities and expired [certificates](/@harrisonqian/awesome/wiki/learn/certificates), highlighting a lack of visibility and control over secrets management.
- [CyberArk](https://www.cyberark.com/resources/ebooks/2025-identity-[security](/@harrisonqian/awesome/wiki/security/security)-landscape) - [Identity Security Threat Landscape Report](Annual%20Security%20Reports/2025/CyberArk-Identity-Security-Threat-Landscape-2025.pdf) (2025) - Examines the impact of cyberattacks on identity, including cyber debt, GenAI, machine identities, and third- and fourth-party risks. Key findings reveal a growing cyber debt fueled by these factors, highlighting the need for proactive security strategies.
- [Dashlane](https://www.dashlane.com) - [State of Credential [Security](/@harrisonqian/awesome/wiki/security/security) Report](Annual%20Security%20Reports/2025/Dashlane-State-of-Credential-Security-Report-2025.pdf) (2025) - Examines the state of credential security in the modern workplace, highlighting how [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) and shadow information technology expand the attack surface for organizations. Key findings reveal that 74 percent of information technology leaders identify artificial intelligence as an increased threat to password security, while 37 percent of corporate applications remain outside of single sign on management.
- [Descope](https://www.descope.com/press-release/2025-state-of-customer-identity) - [State of Customer Identity Report](Annual%20Security%20Reports/2025/Descope-State-of-Customer-Identity-Report-2025.pdf) (2025) - Analyzes the pervasive authentication stagnation noting 87% of organizations use passwords despite only 2% viewing them as effective. Highlights that open-source solutions nearly double revenue loss compared to commercial platforms , while AI trust paradoxically declines as deployments scale.
- [Duo](https://duo.com/blog/research-insights-4-trends-reshaping-identity-[security](/@harrisonqian/awesome/wiki/security/security)-in-2025) - [State Of Identity Security Report](Annual%20Security%20Reports/2025/Duo-State-of-Identity-Security-Report-2025.pdf) (2025) - Analyzes the state of identity security and the challenges IT and security leaders face in 2025. Key findings reveal low confidence in identity providers and significant gaps in MFA adoption, despite a growing awareness of AI-driven threats and a trend towards security-first identity strategies.
- [Guidepoint](https://www.guidepointsecurity.com/resources/the-state-of-iam_maturity_2025/) - [Identity Access Management Maturity Report](Annual%20Security%20Reports/2025/GuidePoint-Identity-Access-Management-Maturity-Report-2025.pdf) (2025) - Analyzes the current state of Identity and Access Management maturity across organizations, evaluating the effectiveness of their practices and investments. Key findings indicate that most organizations are underfunded and overly reliant on manual processes, while high performers demonstrate stronger [security](/@harrisonqian/awesome/wiki/security/security) postures by leveraging automation and advanced identity technologies.
- [Hypr](https://www.hypr.com/resources/report-state-of-passwordless) - [State of Passwordless Identity Assurance](Annual%20Security%20Reports/2026/Hypr-State-of-Passwordless-Identity-Assurance-2026.pdf) (2026) - Analyzes the current state of passwordless identity assurance and the transition toward industrializing [security](/@harrisonqian/awesome/wiki/security/security) practices amidst a shifting threat landscape. Key findings reveal that generative and agentic [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) have become the primary security concerns for 53 percent and 45 percent of organizations respectively, while 87 percent of respondents reported experiencing some form of deepfake attack in the past year.
- [Okta](https://www.okta.com/reports/the-secure-sign-in-trends-report/) - [Secure Sign In Trends Report](Annual%20Security%20Reports/2025/Okta-Secure-Sign-in-Trends-Report-2025.pdf) (2025) - Organizations are maintaining the steady adoption of traditional defenses while rapidly shifting toward advanced [security](/@harrisonqian/awesome/wiki/security/security) [standards](/@harrisonqian/awesome/wiki/miscellaneous/standards). The analysis reveals that while overall multi-factor authentication adoption within the workforce context has reached 70%, organizations are also making a critical shift to phishing-resistant, passwordless authentication.
- [Omada](https://omadaidentity.com/resources/analyst-reports/state-of-iga/) - [State Of Identity Governance](Annual%20Security%20Reports/2026/Omada-State-of-Identity-Governance-2026.pdf) (2026) - Examines the current state of identity governance and [security](/@harrisonqian/awesome/wiki/security/security), focusing on the challenges of managing non-human identities and the rapid adoption of [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) within enterprise environments. Research involving 577 security leaders reveals that while 76 percent of organizations view identity security as a [core](/@harrisonqian/awesome/wiki/platforms/core) strategic pillar, 74 percent of firms still prioritize tracking basic provisioning metrics over critical leading indicators of identity risk.
- [Sail Point](https://www.sailpoint.com/horizons) - [Horizons Of Identity Security](Annual%20Security%20Reports/2025/SailPoint-Horizons-of-Identity-[Security](/@harrisonqian/awesome/wiki/security/security)-2025.pdf) (2025) - Examines the evolving landscape of identity security and organizational maturity, highlighting its transformation from foundational control to a critical security frontier. Key findings highlight the potential for strategic investments to improve security posture and deliver higher returns, particularly among organizations demonstrating advanced maturity levels.
- [Spy Cloud](https://spycloud.com/resource/report/identity-threat-report-2025/) - [Identity Threat Report](Annual%20Security%20Reports/2025/SpyCloud-Identity-Threat-Report-2025.pdf) (2025) - Analyzes the landscape of identity-based cyber threats, highlighting trends, benchmarks, and strategies for enhanced protection. Key findings reveal that while most organizations are concerned about identity-based attacks and ransomware, significant defense gaps persist, including limited automation in remediation and inconsistent credential revocation practices.

### Penetration Testing
- [Cobalt](https://resource.cobalt.io/state-of-pentesting-2025) - [State of Pentesting](Annual%20Security%20Reports/2025/Cobalt-State-of-Pentesting-2025.pdf) (2025) - Offers an overview of the current state of penetration [testing](/@harrisonqian/awesome/wiki/testing/testing), including trends, challenges, and best practices across various industries. A key finding reveals a significant increase in manual penetration [testing](/@harrisonqian/awesome/wiki/testing/testing) alongside the emergence of AI-driven attacks and vulnerabilities, necessitating a refined pentesting maturity model.
- [HackerOne](https://www.hackerone.com/resources/reporting/8th-hacker-powered-[security](/@harrisonqian/awesome/wiki/security/security)-report) - [Hacker Powered Security Report](Annual%20Security%20Reports/2025/HackerOne-Hacker-Powered-Security-Report-2025.pdf) (2025) - Analyzes the evolving landscape of hacker-powered security, focusing on the [integration](/@harrisonqian/awesome/wiki/platforms/integration) of AI and the human element. Key insights reveal a significant surge in AI-related vulnerability reports and a growing trend of researchers upskilling to leverage AI in their offensive security workflows.

### Privacy and Data Protection
- [Bridewell](https://www.bridewell.com/insights/white-papers/detail/cyber-threat-intelligence-report-2024) - [Global Regulatory Landscape Guide](Annual%20Security%20Reports/2026/Bridewell-Global-Regulatory-Landscape-Guide-2026.pdf) (2026) - Scrutinizes the evolving global regulatory landscape for 2026, focusing on the [integration](/@harrisonqian/awesome/wiki/platforms/integration) of data privacy, [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) governance, and cybersecurity resilience [frameworks](/@harrisonqian/awesome/wiki/front-end-development/frameworks) across the United Kingdom and Europe. Key findings highlight a significant shift toward harmonized enforcement, including the full implementation of the European Union Artificial Intelligence Act by August 2, 2026, and the establishment of binding 15 month investigation timelines for complex cross border data protection complaints to streamline regulatory oversight.
- [Cisco](https://www.cisco.com/c/en/us/about/trust-center/data-privacy-benchmark-study.html) - [Privacy Benchmark Study](Annual%20Security%20Reports/2025/Cisco-Privacy-Benchmark-Study-2025.pdf) (2025) - Highlights evolving trends in data privacy, examining the impact of regulation, investment, and the increasing role of [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence). Key insights reveal a paradoxical preference for local data storage despite higher trust in global providers, sustained positive impact from privacy legislation, and growing organizational focus on AI governance.
- [Drata](https://drata.com/resources/reports/grc-trends) - [State of GRC](Annual%20Security%20Reports/2025/Drata-State-of-GRC-2025.pdf) (2025) - Focuses on the evolving role of Governance, Risk Management, and Compliance, transitioning from a cost center to a strategic business driver. A key finding highlights the challenges GRC teams face in balancing compliance complexity and business growth, including concerns about AI hallucinations providing improper GRC guidance.
- [Hyperproof](https://www.prnewswire.com/news-releases/hyperproof-releases-2026-benchmark-report-revealing-how-ai-is-reshaping-grc-302686406.html) - [IT Risk and Compliance Benchmark Report](Annual%20Security%20Reports/2026/Hyperproof-IT-Risk-and-Compliance-Benchmark-Report-2026.pdf) (2026) - Analyzes the current state of governance, risk, and compliance programs by evaluating organizational structures, framework adoption, and the operational challenges of scaling [security](/@harrisonqian/awesome/wiki/security/security) readiness. Key findings indicate that while 86 percent of organizations have successfully centralized their governance, risk, and compliance teams, only 21 percent have achieved a fully integrated view of risk management, leaving many firms reliant on fragmented processes that increase vulnerability to security breaches.
- [Immuta](https://www.immuta.com/resources/2025-state-of-data-[security](/@harrisonqian/awesome/wiki/security/security)-report/) - [State of Data Security Report](Annual%20Security%20Reports/2025/Immuta-State-of-Data-Security-Report-2025.pdf) (2025) - A survey of 700+ data professionals examines the current state of data security, including challenges, trends, and best practices across various industries. Key findings reveal that security and access remain top concerns amidst growing data demands, with people, processes, and technology all contributing to the complexities.
- [Kiteworks](https://www.kiteworks.com/report-2025-forecast-for-managing-private-content-exposure-risk/) - [Forecast for Managing Private Content Exposure Risk](Annual%20Security%20Reports/2025/Kiteworks-Forecast-for-Managing-Private-Content-Exposure-Risk-2025.pdf) (2025) - Outlines 12 predictions for managing private content exposure risk, based on cybercrime, cybersecurity, and compliance trends focusing on sensitive content communications. Key predictions highlight the evolving global data privacy landscape, the increasing importance of secure content collaboration, and the need for robust API [security](/@harrisonqian/awesome/wiki/security/security) to manage these risks effectively.
- [Kiteworks](https://www.kiteworks.com) - [Data [Security](/@harrisonqian/awesome/wiki/security/security) Compliance Risk Forecast](Annual%20Security%20Reports/2026/Kiteworks-Data-Security-Compliance-Risk-Forecast-2026.pdf) (2026) - Examines the evolving landscape of enterprise data security and [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) governance, highlighting critical gaps in organizational readiness as agentic systems [move](/@harrisonqian/awesome/wiki/programming-languages/move) into production. Key findings reveal that 60 percent of organizations lack the ability to terminate misbehaving artificial intelligence agents, while 54 percent of corporate boards remain unengaged in governance, a deficiency that correlates with a 26 to 28 point decline in overall security maturity across all evaluated metrics.

### Ransomware
- [Delinea](https://delinea.com/resources/2025-ransomware-survey-report) - [State Of Ransomware Report](Annual%20Security%20Reports/2025/Delinea-State-of-Ransomware-Report-2025.pdf) (2025) - Analyzes the evolving ransomware threat landscape and organizational responses, highlighting key trends and challenges. Key findings indicate a surge in ransomware breaches and data extortion, alongside increasing executive concern despite the limited effectiveness of traditional anti-ransomware tactics and the under-deployment of least privilege.
- [Semperis](https://www.semperis.com/ransomware-risk-report/) - [Ransomware Risk Report](Annual%20Security%20Reports/2025/Semperis-Ransomware-Risk-Report-2025.pdf) (2025) - Analyzes the global ransomware landscape, evaluating attack frequency, success rates, and the critical role of identity infrastructure. Key findings indicate a modest global decrease in ransomware success, yet 78% of organizations were still targeted, with 83% of attacks compromising identity infrastructure, and 15% of victims receiving no decryption keys after payment.
- [Sophos](https://www.sophos.com/en-us/content/state-of-ransomware) - [State Of Ransomware](Annual%20Security%20Reports/2025/Sophos-State-of-Ransomware-2025.pdf) (2025) - Outlines the state of ransomware in 2025, examining technical and operational attack vectors, data handling, and the financial and human costs of incidents. Notably, data encryption rates are at a six-year low of 50%, and median ransom payments dropped by 50%, though exploited vulnerabilities remain the leading attack vector.
- [Sophos](https://www.sophos.com/en-us/resources/white-papers/state-of-ransomware-in-manufacturing-and-production) - [State Of Ransomware In Manufacturing](Annual%20Security%20Reports/2025/Sophos-State-of-Ransomware-in-Manufacturing-2025.pdf) (2025) - Outlines technical and organizational root causes of incidents within manufacturing. Insights reveal specific vulnerabilities exploited by actors and provide a comparison to other industrial sectors.

### AI and Emerging Technologies
- [Akto](https://www.akto.com) - [State of Agentic AI [Security](/@harrisonqian/awesome/wiki/security/security) Report](Annual%20Security%20Reports/2025/Akto-State-of-Agentic-AI-Security-Report-2025.pdf) (2025) - Examines the rapid [integration](/@harrisonqian/awesome/wiki/platforms/integration) of agentic [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) within enterprise environments and the resulting security challenges posed by autonomous workflows. Findings reveal that while 69 percent of organizations are actively piloting or running agentic systems, only 21 percent maintain a comprehensive inventory of their agents and Model Context Protocol connections. This critical visibility gap is further compounded by the fact that 79 percent of enterprises currently lack formal security governance policies, leaving autonomous systems to operate without necessary guardrails or oversight in increasingly complex production environments.
- [Apono](https://www.prnewswire.com/news-releases/new-apono-report-reveals-98-of-cybersecurity-leaders-are-slowing-agentic-ai-adoption-due-to-insufficient-[security](/@harrisonqian/awesome/wiki/security/security)-controls-302696914.html) - [State of Agentic AI Cyber Risk Report](Annual%20Security%20Reports/2026/Apono-State-of-Agentic-AI-Cyber-Risk-Report-2026.pdf) (2026) - Examines the state of agentic AI adoption and the associated cybersecurity risks and organizational preparedness. Key findings reveal that while 100% of cybersecurity leaders agree agentic AI attacks would be more damaging than.
- [Appdome](https://www.appdome.com) - [Mobile App Consumer Survey](Annual%20Security%20Reports/2025/Appdome-Mobile-App-Consumer-Survey-2025.pdf) (2025) - Examines the evolving landscape of mobile [application security](/@harrisonqian/awesome/wiki/security/application-security) and consumer expectations regarding [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) threats and synthetic fraud. Key findings reveal that 89.4 percent of United States consumers demand robust protections against artificial intelligence driven threats, yet only 10.6 percent feel confident in current [security](/@harrisonqian/awesome/wiki/security/security) measures, directly contributing to a 54.2 percent churn rate among users who prioritize proactive fraud prevention over reactive reimbursement.
- [Australian Institute of Company Directors](https://www.aicd.com.au/innovative-technology/digital-business/artificial-intelligence/governance-of-ai.html) - [Directors Introduction to AI](Annual%20Security%20Reports/2025/AICD-Directors-Introduction-to-AI-2025.pdf) (2025) - Offers practical guidance for directors on establishing robust AI governance [frameworks](/@harrisonqian/awesome/wiki/front-end-development/frameworks), adapting to the technology's unique characteristics. The guide highlights a critical gap in current board oversight of AI, advocating for bespoke governance [frameworks](/@harrisonqian/awesome/wiki/front-end-development/frameworks) that address AI's unique risks, data dependencies, and the imperative for ethical deployment.
- [Big ID](https://home.bigid.com/download-ai-risk-report) - [AI Risk And Readiness In The Enterprise](Annual%20Security%20Reports/2025/BigID-AI-Risk-and-Readiness-in-the-Enterprise-2025.pdf) (2025) - Analyzes the readiness of enterprises in securing AI, revealing a significant gap between AI adoption and governance. The report highlights that over 93% of organizations lack full confidence in securing AI-driven data, with AI-powered data leaks being the top [security](/@harrisonqian/awesome/wiki/security/security) concern, while nearly half have no AI-specific security controls.
- [Calypso AI](https://calypsoai.com/content-download-pages/the-insider-ai-threat-report/) - [Insider Threat Report](Annual%20Security%20Reports/2025/CalypsoAI-Insider-Threat-Report-2025.pdf) (2025) - Analyzes the evolving landscape of internal AI adoption and its [security](/@harrisonqian/awesome/wiki/security/security) implications across various organizational levels and industries.
- [Cisco](https://blogs.cisco.com/ai/cisco-state-of-ai-[security](/@harrisonqian/awesome/wiki/security/security)-2026-report) - [State of AI Security](Annual%20Security%20Reports/2026/Cisco-State-of-AI-Security-2026.pdf) (2026) - Examines the evolving landscape of [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) security, documenting the transition from theoretical vulnerabilities to active, large-scale exploitation of agentic systems and supply chains. Research indicates that while 83 percent of organizations plan to deploy agentic capabilities, only 29 percent report being prepared to secure them, highlighting a critical readiness gap that adversaries are actively exploiting through [prompt injection](/@harrisonqian/awesome/wiki/security/prompt-injection) and data poisoning techniques.
- [Clutch Security](https://www.clutch.security/blog/mcp-servers-what-we-found-when-we-actually-looked) - [MCP A View From The Trenches](Annual%20Security%20Reports/2025/ClutchSecurity-MCP-A-View-From-The-Trenches-2025.pdf) (2025) - Investigates the [security](/@harrisonqian/awesome/wiki/security/security) risks of Model Context Protocol server deployments across enterprise environments, revealing a trend of silent, explosive adoption characterized by total security blindness. Critical findings highlight that employees are unwittingly exposing high-value non-human identities to arbitrary, unverified code sourced from public registries such as npm, [GitHub](/@harrisonqian/awesome/wiki/development-environment/github), and PyPI.
- [Cycode](https://www.cycode.com) - [State Of Product Security](Annual%20Security%20Reports/2026/Cycode-State-Of-Product-[Security](/@harrisonqian/awesome/wiki/security/security)-2026.pdf) (2026) - Examines the current state of product security in the era of [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence), focusing on the rapid adoption of coding assistants and the resulting expansion of the organizational attack surface. Research indicates that while 97 percent of organizations utilize artificial intelligence coding assistants, only 19 percent possess full visibility into these implementations, leading 52 percent of firms to operate without centralized governance [frameworks](/@harrisonqian/awesome/wiki/front-end-development/frameworks). This disconnect between development speed and security oversight has prompted 97 percent of surveyed organizations to plan a consolidation of their [application security](/@harrisonqian/awesome/wiki/security/application-security) [stacks](/@harrisonqian/awesome/wiki/miscellaneous/stacks) within the next 12 months to better manage emerging risks.
- [Cyera](https://www.cyera.com) - [State of AI Data [Security](/@harrisonqian/awesome/wiki/security/security) Report](Annual%20Security%20Reports/2025/Cyera-State-of-AI-Data-Security-Report-2025.pdf) (2025) - Examines the rapid [integration](/@harrisonqian/awesome/wiki/platforms/integration) of [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) within enterprise environments and the resulting systemic risks caused by inadequate governance and visibility. Key findings reveal that while 83 percent of organizations have adopted artificial intelligence, only 13 percent possess strong visibility into its usage, and 66 percent of enterprises have already identified instances where autonomous agents accessed more sensitive data than necessary.
- [Darktrace](https://www.darktrace.com/the-state-of-ai-cybersecurity-2025) - [State Of AI Cybersecurity](Annual%20Security%20Reports/2025/Darktrace-State-of-AI-Cybersecurity-2025.pdf) (2025) - Analyzes the transformative impact of [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) on the global threat landscape and the corresponding shift in defensive strategies within [security](/@harrisonqian/awesome/wiki/security/security) operations centers. Key insights reveal that while 89% of CISOs anticipate long-term challenges from AI-powered threats, organizations are prioritizing platform-based AI solutions over headcount growth, with only 11% planning to increase staff despite widespread concerns about preparedness.
- [DeepInstinct](https://www.deepinstinct.com/voice-of-secops-reports) - [Voice of SecOps](Annual%20Security%20Reports/2025/DeepInstinct-Voice-of-SecOps-2025.pdf) (2025) - Examines the [integration](/@harrisonqian/awesome/wiki/platforms/integration) of [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) within [security](/@harrisonqian/awesome/wiki/security/security) operations and its impact on organizational defense strategies based on a survey of 500 senior cybersecurity experts. Findings reveal that while 86 percent of organizations have increased their use of artificial intelligence to improve threat detection, 69 percent of security professionals report that the rapid evolution of these technologies is significantly contributing to operational burnout and persistent knowledge gaps.
- [Delinea](https://delinea.com/resources/2025-ai-in-identity-security) - [AI In Identity [Security](/@harrisonqian/awesome/wiki/security/security) Report](Annual%20Security%20Reports/2025/Delinea-AI-in-Identity-Security-Report-2025.pdf) (2025) - Analyzes the widespread adoption of AI in IT operations and the associated risks, emphasizing the necessity for updated identity governance [frameworks](/@harrisonqian/awesome/wiki/front-end-development/frameworks) to manage agentic and [generative AI](/@harrisonqian/awesome/wiki/computer-science/generative-ai) entities. Key findings indicate that while 94% of global organizations are utilizing or piloting AI, only 44% possess security architectures fully equipped to handle the resulting identity and shadow AI challenges.
- [Deloitte](https://mkto.deloitte.com/rs/712-CNF-326/images/DI_Tech-trends-2026.pdf) - [Tech Trends](Annual%20Security%20Reports/2026/Deloitte-Tech-Trends-2026.pdf) (2026) - Examines the enterprise shift toward operationalizing [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) and [robotics](/@harrisonqian/awesome/wiki/hardware/robotics), focusing on the transition from experimental proof of concept projects to scalable, agentic infrastructure. Key findings reveal that while 64 percent of organizations are increasing their artificial intelligence investments, only 11 percent have successfully deployed agentic systems in production due to significant challenges with legacy system [integration](/@harrisonqian/awesome/wiki/platforms/integration) and data architecture constraints.
- [Gravitee](https://www.softwareseni.com/shadow-ai-and-the-governance-gap-enterprises-are-not-measuring/) - [The AI Governance Gap](Annual%20Security%20Reports/2026/Gravitee-The-AI-Governance-Gap-2026.pdf) (2026) - Examines the critical governance gap in enterprise [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) deployments, focusing on the architectural failure to secure autonomous agents with appropriate identity and access controls. Research indicates that 71 percent of large enterprises have deployed AI agents with direct access to [core](/@harrisonqian/awesome/wiki/platforms/core) business systems, yet only 16 percent effectively govern that access. Furthermore, 88 percent of organizations confirmed or suspected [security](/@harrisonqian/awesome/wiki/security/security) incidents this year, highlighting a systemic inability to monitor machine speed operations or enforce consistent security policies across their agent fleets.
- [Hidden Layer](https://www.hiddenlayer.com) - [AI Threat Landscape Report](Annual%20Security%20Reports/2026/HiddenLayer-AI-Threat-Landscape-Report-2026.pdf) (2026) - Examines the evolving threat landscape for [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence), focusing on vulnerabilities such as data poisoning, [prompt injection](/@harrisonqian/awesome/wiki/security/prompt-injection), and supply chain compromises. Research indicates that as little as 0.1 percent of a training dataset is sufficient to inject a persistent backdoor into a model, while other studies demonstrate that poisoning just 0.001 percent of medical training tokens can lead to harmful model outputs that bypass standard evaluation methods.
- [ICONIQ](https://www.iconiqcapital.com/growth/reports/2025-state-of-ai) - [The AI Builders Playbook](Annual%20Security%20Reports/2025/Iconiq-The-AI-Builders-Playbook-2025.pdf) (2025) - Focuses on the how-to of conceiving, delivering, and scaling AI-powered offerings, including product roadmap, go-to-market strategies, talent, cost management, and internal [productivity](/@harrisonqian/awesome/wiki/work/productivity). Key findings indicate that AI-native companies are rapidly scaling products, with agentic workflows being the most common type of AI product built by 80% of AI-native companies, while model accuracy and the increasing importance of cost are top considerations for foundational models.
- [KPMG](https://kpmg.com/ee/en/insights/2026/01/kpmg-global-tech-report-2026.html) - [Cybersecurity Considerations](Annual%20Security%20Reports/2026/KPMG-Cybersecurity-Considerations-2026.pdf) (2026) - Examines the evolving landscape of cybersecurity for 2026, focusing on the strategic [integration](/@harrisonqian/awesome/wiki/platforms/integration) of autonomous [security](/@harrisonqian/awesome/wiki/security/security), [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) governance, and the management of non-human identities within hyperconnected environments. Key findings highlight that 92 percent of technology executives identify the management of artificial intelligence agents as an essential skill for the workforce within the next five years, while the proliferation of machine credentials now necessitates a fundamental shift in identity governance to maintain operational resilience against emerging geopolitical and quantum-related threats.
- [McKinsey](https://www.mckinsey.com/capabilities/tech-and-ai/our-insights/tech-forward/state-of-ai-trust-in-2026-shifting-to-the-agentic-era) - [State of AI Trust](Annual%20Security%20Reports/2026/McKinsey-State-of-AI-Trust-2026.pdf) (2026) - Assesses the current state of [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) trust and responsible governance across approximately 500 global organizations. Findings reveal that while overall maturity is improving, only 30 percent of enterprises have reached advanced levels in strategy and agentic controls, and nearly two-thirds of respondents identify [security](/@harrisonqian/awesome/wiki/security/security) and risk concerns as the primary barrier to scaling autonomous systems.
- [Memcyco](https://www.memcyco.com/library/state-of-digital-impersonation-fraud-resilience-report/) - [AI-Driven-Fraud](Annual%20Security%20Reports/2026/Memcyco-AI-Driven-Fraud-2026.pdf) (2026) - Analyzes [security](/@harrisonqian/awesome/wiki/security/security) findings and threat trends reported by Memcyco for 2026, examining key attack patterns, vulnerability data, and defensive recommendations. Based on a survey of 200 C-level executives and directors across scam-targeted industries, the findings highlight that while businesses are aware of the threat, they remain largely reactive.
- [Okta](https://spaces.okta.com/story/ai-at-work/page/1) - [AI at Work](Annual%20Security%20Reports/2025/Okta-AI-at-Work-2025.pdf) (2025) - Focuses on the perspectives of C-suite executives regarding the transformative impact of [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) on [security](/@harrisonqian/awesome/wiki/security/security), innovation, and efficiency within organizations. Key findings reveal executive sentiment, concerns, and priorities regarding AI implementation, highlighting varying levels of understanding and [integration](/@harrisonqian/awesome/wiki/platforms/integration) across different organizations.
- [Salt](https://content.salt.security/AI-Agentic-Survey-2025_LP-AI-Agentic-Survey-2025.html) - [Future Of Agentic AI Report](Annual%20Security%20Reports/2025/Salt-Future-of-Agentic-AI-Report-2025.pdf) (2025) - Highlights the increasing deployment of agentic AI and the foundational importance of robust API [security](/@harrisonqian/awesome/wiki/security/security) to build and sustain consumer trust. The report uncovers a significant disparity between the rapid adoption of AI agents and lagging consumer trust, with 62% of consumers perceiving chatbots as more vulnerable to manipulation.
- [SANS](https://www.sans.org/white-papers/sans-2025-ai-survey-measuring-ai-impact-[security](/@harrisonqian/awesome/wiki/security/security)-three-years-later) - [AI Survey](Annual%20Security%20Reports/2025/SANS-AI-Survey-2025.pdf) (2025) - Analyzes the impact of AI on cybersecurity, three years after the introduction of [generative AI](/@harrisonqian/awesome/wiki/computer-science/generative-ai). The survey reveals that security teams are lagging in AI adoption, with only half using it for cybersecurity tasks, while 81% express concern over AI-powered threats, highlighting a need for more training and governance.
- [Synack](https://www.synack.com) - [State of Agentic AI in Pentesting](Annual%20Security%20Reports/2026/Synack-State-of-Agentic-AI-in-Pentesting-2026.pdf) (2026) - Examines the [integration](/@harrisonqian/awesome/wiki/platforms/integration) of agentic [artificial intelligence](/@harrisonqian/awesome/wiki/theory/artificial-intelligence) into penetration [testing](/@harrisonqian/awesome/wiki/testing/testing) programs to address the [scalability](/@harrisonqian/awesome/wiki/front-end-development/scalability) limitations of traditional manual [security](/@harrisonqian/awesome/wiki/security/security) assessments. Key findings reveal that 87 percent of organizations have moved beyond the evaluation phase, with 95 percent of surveyed entities anticipating that agentic systems will eventually displace traditional testing services to help close the current coverage gap where 68 percent of enterprise attack surfaces remain untested.
- [Wiz](https://www.wiz.io/reports/ai-[security](/@harrisonqian/awesome/wiki/security/security)-readiness) - [AI Security Readiness](Annual%20Security%20Reports/2025/Wiz-AI-Security-Readiness-2025.pdf) (2025) - Analyzes the current state of AI security readiness among cloud architects, engineers, and security leaders, highlighting critical gaps. Key findings reveal widespread AI adoption is significantly outpacing the development of in-house security expertise and the implementation of AI-specific posture management tools, leading to substantial visibility challenges like shadow AI.

## Resources
Annual reports are the result of a collaborative effort, combining research from both paid and non-profit sources, drawn from within the organization and the broader cybersecurity community. These reports rely on the contributions of various organizations that help shape the field by setting standards, offering certifications, conducting research, and influencing policy.

The categories below highlight the diverse roles these organizations play in building cybersecurity programs and advancing best practices. By exploring these groups, readers can gain insight into the ecosystem that underpins the development of annual reports and drives progress in the industry.

**Research Consulting:** These are organizations that offer paid research services, market analysis, and consulting in the field of information technology and cybersecurity.

**Standards and Certifications:** Organizations involved in setting cybersecurity standards, providing certifications, and creating frameworks for best practices.

**Threat Intelligence and Incident Response:** Organizations focused on sharing threat intelligence, coordinating cyber incident responses, and combating cyber threats.

**Policy and Advocacy]:** Institutions shaping cybersecurity policies, regulations, and public awareness on a national or international scale.

**Working Groups:** These are collaborative organizations or professional associations that conduct research, share information, and develop best practices in cybersecurity.

**Government and Non-profits:** This category includes government agencies and non-profit organizations dedicated to cybersecurity research, policy development, and public awareness.

### Research Consulting
- [451 Research](https://www.451research.com/) - A technology research and advisory firm specializing in emerging technology segments including cybersecurity market analysis and trends.
- [ABI Research](https://www.abiresearch.com/) - A technology market intelligence company providing strategic guidance on transformative technologies, including cybersecurity and digital [security](/@harrisonqian/awesome/wiki/security/security).
- [Forrester Research](https://www.forrester.com/) - An advisory company that offers paid research, consulting, and event services specialized in market research for information technology.
- [Frost & Sullivan](https://www.frost.com/) - A consulting firm offering market research and analysis in cybersecurity, with particular focus on emerging technologies and market opportunities.
- [Gartner](https://www.gartner.com/) - A technology research and consulting firm which offers private paid consulting as well as executive programs and conferences.
- [GigaOm](https://gigaom.com/) - A research firm offering practical, hands-on, practitioner-driven research for businesses.
- [International Data Corporation (IDC)](https://www.idc.com/) - A global provider of market intelligence and advisory services.
- [KuppingerCole](https://www.kuppingercole.com/) - A global analyst company specializing in information [security](/@harrisonqian/awesome/wiki/security/security), identity & access management, and risk management.
- [Omdia](https://omdia.tech.informa.com/) - A global technology research powerhouse focusing on cybersecurity market analysis and digital transformation.

### Standards and Certifications
- [American Institute of CPAs](https://us.aicpa.org/) - The AICPA SOC2 is a framework for managing and safeguarding customer data based on five trust service criteria: [Security](/@harrisonqian/awesome/wiki/security/security), Availability, Processing Integrity, Confidentiality, and Privacy.
- [The Information [Security](/@harrisonqian/awesome/wiki/security/security) Forum (ISF)](https://www.securityforum.org/) - A global, independent organization dedicated to benchmarking and sharing best practices in information security.
- [The International Organization for Standardization (ISO)](https://www.iso.org/) - An international organizational body composed of representatives which conduct closed research for creation of [standards](/@harrisonqian/awesome/wiki/miscellaneous/standards).
- [The Information Systems Audit and Control Association (ISACA)](https://www.isaca.org/) - An international professional association focused on IT governance, which conducts research for and on behalf of the members.
- [The International Information System [Security](/@harrisonqian/awesome/wiki/security/security) Certification Consortium (ISC)²](https://www.isc2.org/) - An American not-for-profit organization which conducts research for consumers of their cybersecurity training and certifications.
- [SANS Institute](https://www.sans.org/) - A private U.S. for-profit company which conducts research for consumers of their cybersecurity training and certifications.
- [Trusted Computing Group (TCG)](https://trustedcomputinggroup.org/) - Develops and promotes open [standards](/@harrisonqian/awesome/wiki/miscellaneous/standards) for hardware-enabled [security](/@harrisonqian/awesome/wiki/security/security).

### Threat Intelligence and Incident Response
- [The Anti-Phishing Working Group (APWG)](https://apwg.org/) - A global coalition focused on unifying the global response to cybercrime.

---
*truncated — [full list on GitHub](https://github.com/jacobdjwilson/awesome-annual-security-reports)*