Can You Trust Your VSCode Extensions? aquasec.com

Impersonate popular VSCode extensions and trick unknowing developers into downloading them.

Australia cyber.gov.au

Securing Space Cyber Security for Low Earth Orbit Satellite Communications (2026) - Examines the cyber security risks and mitigation strategies associated with low earth orbit satellite communications across space, ground, and user segments. Key findings highlight that 100…

Fortune 500 at Risk: 250M Artifacts Exposed via Misconfigured Registries aquasec.com

Misconfigured public registries with software artifacts containing sensitive proprietary code and secrets.

Australian Cyber Security Centre (ACSC) cyber.gov.au

Provides cyber security advice and support to Australian businesses and individuals.

Invisible Ghost: Alarming Vulnerability in GitHub Copilot apexhq.ai

Using hidden Unicode characters to manipulate GitHub Copilot's suggestions.

Canada cyber.gc.ca

National Cyber Threat Assessment (2025) - Analyzes the cyber threats facing Canada from state adversaries and cybercrime, forecasting trends up to 2026. The report highlights the increasing aggressiveness of state adversaries in cyberspace, the resilience of cybercrime due to…

Canadian Centre for Cyber Security cyber.gc.ca

Canada's national authority on cybersecurity.

The Monsters in Your Build Cache – GitHub Actions Cache Poisoning adnanthekhan.com

Allows attackers to compromise workflows even with limited permissions by exploiting vulnerabilities or dependency flaws, attackers steal cache tokens, fill the cache to force evictions, and replace legitimate entries with malicious code.

MITRE ctid.mitre.org

Threat Informed Defense Report (2026) - Examines the state of threat-informed defense and industry adoption of the MITRE framework through a comprehensive survey of security professionals. Key findings reveal that while 82 percent of respondents know about the framework, only 8…

Center for Strategic and International Studies (CSIS) csis.org

A think tank with a Technology Policy Program that conducts research and provides insights into technology and cybersecurity policies.

CSC cscdbs.com

The Chief Information Security Officer Outlook (2025) - Analyzes the cybersecurity concerns of CISOs in 2025, highlighting the increasing complexity and intensity of threats, particularly domain-related attacks.

Singapore Cyber Security Agency (CSA) csa.gov.sg

Singapore's national agency overseeing cybersecurity strategy and development.

Crowd Strike crowdstrike.com

SaaS Security Posture Management (2025) - Analyizes the 2024 SaaS Security Posture Management market, benchmarking companies' innovation and growth potential. Key findings highlight a competitive landscape with significant growth opportunities and best practices for companies…

One Supply Chain Attack to Rule Them All – Poisoning GitHub's Runner Images adnanthekhan.com

A critical vulnerability in GitHub Actions, involving a misconfigured self-hosted runner in the actions/runner-images repository, allowed potential compromise of all GitHub and Azure hosted runner images.

Crowd Strike crowdstrike.com

Threat Hunting Report (2026) - Examines the 2026 threat landscape and frontline hunting observations to highlight how adversaries exploit trust, software supply chains, and emerging artificial intelligence attack surfaces. Key findings reveal that 88 percent of vulnerability…

Elpaccto2 cristosvelasco.de

Weaponizing AI (2025) - Examines the integration of artificial intelligence within organized crime networks and the resulting challenges for law enforcement agencies across Europe and Latin America. Criminal organizations are increasingly leveraging generative models to…

Thales cpl.thalesgroup.com

Data-Threat-Report (2026) - Analyzes security findings and threat trends reported by Thales for 2026, examining key attack patterns, vulnerability data, and defensive recommendations drawn from data collected across hundreds of security practitioners. Findings span 10 or more…

Visa corporate.visa.com

Biannual Threats Report (2025) - Analyzes the payments ecosystem's threat landscape, focusing on evolving fraud tactics and scams. Key insights reveal a significant increase in ransomware and data breach incidents, alongside sophisticated fraud schemes leveraging malicious…

Contrast Security contrastsecurity.com

Software Under Siege (2025) - Highlights the increasing prevalence and impact of application-layer attacks targeting custom code, APIs, and application logic. The report reveals that applications face an average of 81 confirmed attacks per month, coupled with nearly 30 serious…

Salt content.salt.security

State Of API Security (2025) - Highlights the persistent challenges and evolving landscape of API security, driven by rapid digital transformation and cloud migration. Despite widespread API adoption and a nearly universal encounter with security issues, many organizations…

Salt content.salt.security

CISO and CIO Investment Priorities (2025) - Surveys key cybersecurity investment priorities for CISOs and CIOs in 2025, as detailed in a white paper by Osterman Research and sponsored by Salt Security. Key findings highlight shifts in priorities based on evolving threat…

NAIC content.naic.org

Cybersecurity Insurance Report (2025) - Analyzes the financial performance and operational trends of the United States cybersecurity insurance market using annual regulatory filing data and industry statistics. Key findings reveal that direct written premiums contracted by 7…

EuropeanTelcoISAC connecteurope.org

Security Landscape (2026) - Surveys the evolving cybersecurity landscape and strategic priorities for European telecommunications providers in 2026. Key findings reveal the landscape comprises eight threats, one distinct opportunity, and one combined development, driven.

ConnectEU connecteurope.org

State of Digital Communications (2026) - Examines the state of the European digital communications ecosystem, highlighting significant gaps in infrastructure investment and global competitiveness. Key findings reveal that while 5G coverage reached 94.9 percent of the population…

CompTIA comptia.org

State of the Tech Workforce (2026) - Analyzes the state of the United States technology workforce by examining employment trends, economic impact, and the integration of artificial intelligence across various industry sectors. Key findings indicate that net tech employment…

CompTIA comptia.org

State of Cybersecurity (2025) - Analyzes the current state of cybersecurity, focusing on organizational priorities, incident impact, and workforce development needs. Key findings reveal that cybersecurity is a high priority for 59% of organizations, yet 56% experienced…

Allianz commercial.allianz.com

Commercial Directors and Officers Insurance Insights (2026) - Examines the evolving landscape of directors and officers liability, highlighting how geopolitical instability, cyber threats, and artificial intelligence are driving increased litigation and regulatory scrutiny. Key…

Allianz commercial.allianz.com

Risk Barometer (2026) - Investigates the primary global business risks for 2026 by surveying 3,338 respondents across 97 countries to identify emerging threats and organizational vulnerabilities. Cyber incidents remain the leading global concern for the fifth consecutive year…

Allianz commercial.allianz.com

Commercial Cyber Security Trends (2025) - Examines the evolving landscape of cyber security resilience, focusing on the integration of artificial intelligence and the impact of stringent regulatory frameworks like the Digital Operational Resilience Act. Key findings indicate…

Cogility cogility.com

Insider Risk Report (2025) - Examines the state of insider risk management and modern data security challenges across corporate networks. Key findings reveal that 92 percent of recent incidents lacked proper access controls, while 96 percent of organizations feel confident…

Cogility cogility.com

Insider Risk Decay (2026) - Evaluates potential risk indicator decay rates within organizational insider threat mitigation programs to demonstrate how threat weight attenuates over time. Industry data reveals that 83% of organizations experienced an insider incident in 2024…

Clutch Security clutch.security

MCP A View From The Trenches (2025) - Investigates the security risks of Model Context Protocol server deployments across enterprise environments, revealing a trend of silent, explosive adoption characterized by total security blindness. Critical findings highlight that…

The Cloud Security Alliance (CSA) cloudsecurityalliance.org

Promotes best practices for providing security assurance within cloud computing.

WithSecure cloudprotection.com

Salesforce Threat Landscape Report (2026) - Investigates the evolving Salesforce threat landscape by analyzing detection telemetry and publicly reported incidents to document how cybercriminal groups exploit high-trust access paths. Findings reveal that malicious activity is…

Cloudflare cloudflare.com

Security Signals Report (2026) - Analyzes the transition toward autonomic resilience in enterprise security, emphasizing the necessity of governing autonomous systems and mitigating systemic risks within modern digital architectures. Key findings reveal that 98 percent of…

Google cloud.google.com

Cybersecurity Forecast 2025 (2025) - Insights from Google Cloud leaders on emerging cybersecurity trends. Key predictions include the continued rise of ransomware and multifaceted extortion, the increasing use of AI by attackers, and the persistent threat from state-sponsored…

Google cloud.google.com

Cloud ROI Of AI (2025) - Focuses on the impact of AI agents on business value, highlighting the shift from predictive to agentic AI. The report finds that 88% of agentic AI early adopters are seeing a positive ROI on gen AI, driven by executive commitment and strategic…

Google cloud.google.com

Advances In Threat Actor Usage Of AI Tools (2025) - Focuses on the increasing use of AI tools by threat actors, highlighting a shift towards deploying novel AI-enabled malware in active operations. Key findings include the emergence of malware families using LLMs for dynamic…

CitizenLab citizenlab.ca

Bad Connection (2026) - Investigates the systemic exploitation of global telecommunications infrastructure by covert surveillance actors leveraging insecure 3G and 4G signalling protocols. The research identifies two distinct threat campaigns that utilized customized tooling to…

Center for Internet Security (CIS) cisecurity.org

An American non-profit organization that provides cybersecurity solutions, best practices, and the CIS Controls.

Cisco cisco.com

State of Industrial AI Report (2026) - Examines the state of industrial artificial intelligence adoption and infrastructure readiness across global manufacturing, utilities, and transportation sectors. Key findings reveal that 40 percent of organizations cite cybersecurity…

Cisco cisco.com

State of Wireless Report (2026) - Examines the strategic role of wireless infrastructure in the era of artificial intelligence, highlighting its evolution into a critical growth engine for modern enterprises. Key findings reveal that while 78 percent of organizations report…

Cisco cisco.com

Privacy Benchmark Study (2025) - Highlights evolving trends in data privacy, examining the impact of regulation, investment, and the increasing role of artificial intelligence. Key insights reveal a paradoxical preference for local data storage despite higher trust in global…

Industrial Control Systems Joint Working Group (ICSJWG) cisa.gov

Facilitates information sharing and collaboration for cybersecurity in industrial control systems.

Cybersecurity and Infrastructure Security Agency (CISA) cisa.gov

A U.S. government agency responsible for enhancing the security and resilience of the nation's critical infrastructure.

Check Point checkpoint.com

Cloud Security Report (2026) - Examines the systemic risks facing enterprise cloud infrastructures as artificial intelligence workloads transition into mission-critical production environments. Telemetry indicates that 70 percent of organizations operate generative artificial…

Checkpoint checkpoint.com

Cloud Security Report (2025) - Focuses on the escalating cloud security challenges organizations face, including fragmented environments and outdated defenses. The report reveals that cloud-related breaches are rising, detection is largely reactive, and slow remediation extends…

Checkmarx checkmarx.com

Future Of Application Security (2025) - Analyzes the current state and future challenges of application security amidst rapid developer velocity and the pervasive integration of AI in development workflows.

Chainguard chainguard.dev

State Of Trusted Open Source (2025) - Analyzes the state of trusted open source software consumption and its associated risks. Key findings reveal that 98% of vulnerabilities occur outside the top 20 most popular projects, highlighting significant security burdens in less…

Chainguard chainguard.dev

Engineering Reality Report (2026) - Analyzes the current state of the developer experience, highlighting key challenges and opportunities for improvement. Key findings indicate that 72% of engineers struggle to find time for new feature development due to demands on their time…