Deepstrike deepstrike.io

Cybersecurity Statistics (2026) - Analyzes the global cybersecurity landscape by evaluating incident volumes, financial impacts, and evolving threat vectors across diverse industries. Key findings reveal a 32 percent year over year increase in global ransomware attacks reaching…

DeepInstinct deepinstinct.com

Voice of SecOps (2025) - Examines the integration of artificial intelligence within security operations and its impact on organizational defense strategies based on a survey of 500 senior cybersecurity experts. Findings reveal that while 86 percent of organizations have…

Data Dog datadoghq.com

State Of DevSecOps (2026) - Analyzes the current state of DevSecOps by investigating the prevalence of exploitable vulnerabilities and the risks associated with rapid software dependency updates. Findings indicate that 87 percent of organizations maintain at least one…

Data Dog datadoghq.com

State Of Cloud Security (2025) - Analyzes cloud security posture across AWS, Azure, and Google Cloud with a focus on identity risks, default security gaps, and the uneven adoption of guardrails like IMDSv2, data perimeters, and public access blocks. The study highlights…

Darktrace darktrace.com

State Of AI Cybersecurity (2025) - Analyzes the transformative impact of artificial intelligence on the global threat landscape and the corresponding shift in defensive strategies within security operations centers. Key insights reveal that while 89% of CISOs anticipate…

Darktrace darktrace.com

Annual Threat Report (2026) - Analyzes the global cyber threat landscape through behavioral analysis and real world customer data from across international regions. Key findings reveal that software as a service and email based social engineering account for nearly 70% of all…

Darktrace darktrace.com

The State Of Cybersecurity In The Finance Sector (2025) - Examines the state of cybersecurity in the finance sector, detailing evolving risks to confidentiality, integrity, and availability. Key findings reveal a significant increase in sophisticated phishing techniques like…

Darktrace darktrace.com

Remote Workforce Security Report (2026) - Examines the cybersecurity risks and operational challenges introduced by the sudden shift to a remote workforce across global organizations. Key findings reveal that 80% of security professionals are moderately to extremely concerned…

Cypress Data Defense cypressdatadefense.com

State of Application Security (2025) - Analyzes the state of application security and its impact on product velocity, revealing significant challenges in detection and integration. Key findings indicate that 62% of companies ship insecure code, 60% experience release delays due…

Security alert: social engineering campaign targets technology industry employees github.blog

Phishing GitHub users to download and execute repositories.

Cyfirma cyfirma.com

Tracking Ransomware (2026) - Investigates the evolving ransomware landscape in early 2026, highlighting a shift toward user-mediated access, browser-centric exploitation, and psychological coercion over traditional encryption. Data indicates that ransomware activity reached 683…

GHTorrent Project ghtorrent-downloads.ewi.tudelft.nl

A queryable offline mirror of the GitHub API data. Tutorial.

Cyera cyera.com

State of AI Data Security Reportw. (2025) - Examines the rapid integration of artificial intelligence within enterprise environments and the resulting systemic risks caused by inadequate governance and visibility. Key findings reveal that while 83 percent of organizations have…

Dependency Confusions in Docker and remote pwning of your infra errno.fr

Docker dependency confusion occurs when a misconfigured Docker mirror pulls malicious public images instead of private ones.

Cyentia cyentia.com

State of HRM Insight Report (2025) - Examines the landscape of human risk management by analyzing over two hundred real-time behavioral and threat signals across more than one hundred organizations. Findings indicate that human risk is highly concentrated, with 10 percent of…

Beyond S3: Exposed Resources on AWS duo.com

Public EBS, RDS, AMI and Elasticsearch clusters exposed to the internet.

Hacking GitHub AWS integrations again dagrz.com

Attacking misconfigured pipelines that use OIDC.

Cyentia cyentia.com

CISO Engagement Study (2025) - Focuses on how cybersecurity buyers engage with AI driven topics, evolving content formats, and shifting sponsor behavior across global regions and industries. The data shows AI dominates user interest, OT security is underserved despite growing…

How We Discovered Vulnerabilities in CI/CD Pipelines of Popular Open-Source Projects cycode.com

Extracting all repository and organization secrets in GitHub Actions.

Cyentia cyentia.com

Information Risk Insights Study (2025) - Analyzes incident probability and the increasing risks associated with third-party relationships. A key finding is that incident probability has almost quadrupled in the last 15 years, driven in part by threat actors exploiting trusted…

Holes in Your Bitbucket: Why Your CI/CD Pipeline Is Leaking Secrets cloud.google.com

Bitbucket Secured Variables leak secrets via artifact objects; recommendations include using dedicated secrets managers and code scanning.

Cycode cycode.com

State Of Product Security (2026) - Examines the current state of product security in the era of artificial intelligence, focusing on the rapid adoption of coding assistants and the resulting expansion of the organizational attack surface. Research indicates that while 97…

StarJacking – Making Your New Open Source Package Popular in a Snap checkmarx.com

StarJacking is a technique where attackers make malicious open-source packages appear popular.

Cycode cycode.com

State of Application Security Posture Management (2025) - Examines application security challenges and strategies from the perspectives of CISOs, AppSec Directors, and DevSecOps managers across the UK, US, and Germany. Key findings reveal inefficiencies strain the relationship…

Working as unexpected chainguard.dev

Creating a GitHub branch that matches a branch protection rule pattern with a workflow file that triggers on push to gain access to environment secrets.

Cyble cyble.com

Global Threat Landscape (2025) - Analyzes the global threat landscape of H1 2025, highlighting a significant 54% increase in ransomware attacks compared to the previous year. The report identifies CL0P, Akira, and Qilin as the top ransomware operators, with North America being…

What the fork? Imposter commits in GitHub Actions and CI/CD chainguard.dev

GitHub Actions vulnerability allows forked commits to bypass workflow security settings.

The Cyber Threat Alliance (CTA) cyberthreatalliance.org

An industry-driven group of cybersecurity organizations that share threat intelligence and conduct collaborative research to combat cyber threats.

Understanding typosquatting methods - for a secure supply chain bytesafe.dev

Typosquatting involves publishing malicious packages with names similar to legitimate ones, exploiting typos to inject malicious code.

Cybersecurityventures cybersecurityventures.com

Cybersecurity Market Report (2026) - Analyzes the global cybersecurity market trajectory and the factors driving record levels of investment across diverse industrial and consumer sectors. Projections indicate that global cybersecurity spending will reach one trillion dollars…

Cybersecurity Ventures cybersecurityventures.com

Cybersecurity Market Report Q4 (2025) - Analyzes the global cybersecurity market trajectory, projecting that annual spending will reach one trillion dollars by 2031 due to the expanding threat landscape across digitized infrastructure and industrial systems. Key findings…

Erosion of Trust: Unmasking Supply Chain Vulnerabilities in the Terraform Registry boostsecurity.io

Terraform modules are not protected by the Dependency Lock File, consequently, a seemingly harmless module could potentially introduce malicious code.

Artic Wolf Labs cybersecurity.arcticwolf.com

The State Of Cybersecurity (2025) - Analyzes the 2025 cybersecurity landscape, highlighting a pivotal shift in executive priorities and incident response preparedness. Key findings reveal that artificial intelligence has displaced ransomware as the top security concern for 29…

The massive bug at the heart of the npm ecosystem blog.vlt.sh

NPM Manifest Confusion.

Cyber Proof cyberproof.com

Mid Year Cyber Threat Landscape (2025) - Analyzes the H1 2025 cyber threat landscape, focusing on the surge of AI-powered ransomware operations, intensified targeting of the manufacturing sector, and strategic shifts in supply chain infiltration. Key insights include a 60…

Token-Spray blog.projectdiscovery.io

Automate token validation using Nuclei.

CyberProof cyberproof.com

Global Threat Intelligence Report (2026) - Investigates the evolving landscape of global cyber threats in 2025, focusing on the rapid weaponization of vulnerabilities and the strategic shift toward identity abuse within business-critical systems. Key findings reveal that…

Hacking Terraform State for Privilege Escalation blog.plerion.com

Modifying a Terraform state file allows attackers to delete infrastructure or execute code via custom providers.

Cyber Peace Institute cyberpeaceinstitute.org

A non-profit organization focused on reducing the impact of cyberattacks on civilians and promoting peace in cyberspace.

Introducing MavenGate: a supply chain attack method for Java and Android applications blog.oversecured.com

Many public and popular libraries that have long been abandoned are still being used in huge projects. Access to projects can be hijacked through domain name purchases.

Cyber Int cyberint.com

Travel Threat Landscape Report (2025) - Analyzes the cyber threat landscape targeting the travel and tour operations industry, highlighting recent cyber events and future predictions.

Thousands of images on Docker Hub leak auth secrets, private keys bleepingcomputer.com

Researchers found thousands of Docker Hub images leaking private keys and API secrets.

UKCyber cyberexchange.uk.net

Security Sectoral Analysis Report (2025) - Analyzes the economic performance and growth trajectory of the United Kingdom cyber security sector through a comprehensive assessment of 2,165 active firms. Findings indicate robust expansion across the industry, with total annual…

Gitloker attacks abuse GitHub notifications to push malicious OAuth apps bleepingcomputer.com

Attackers use fake GitHub notifications to trick users into authorizing malicious OAuth apps that steal repo access.

GitHub comments abused to push malware via Microsoft repo URLs bleepingcomputer.com

Hidden GitHub comment link.

Kiteworks cyberdefensewire.com

Data Security Compliance Risk Forecast (2026) - Examines the evolving landscape of enterprise data security and artificial intelligence governance, highlighting critical gaps in organizational readiness as agentic systems move into production. Key findings reveal that 60…

CyberArk cyberark.com

State of Machine Identity Security Report (2025) - Focuses on the critical and often-overlooked area of machine identity security. Key findings reveal that a significant percentage of organizations are concerned about risks stemming from compromised machine identities and…

Employee Personal GitHub Repos Expose Internal Azure and Red Hat Secrets aquasec.com

Employee's personal GitHub repos expose internal Azure & Red Hat secrets.

CyberArk cyberark.com

Identity Security Threat Landscape Report (2025) - Examines the impact of cyberattacks on identity, including cyber debt, GenAI, machine identities, and third- and fourth-party risks. Key findings reveal a growing cyber debt fueled by these factors, highlighting the need for…

GitHub Dataset Research Reveals Millions Potentially Vulnerable to RepoJacking aquasec.com

Millions of GitHub repos are vulnerable to RepoJacking due to org renames, leading to potential code execution.