Annual Security Reports
508 items from jacobdjwilson/awesome-annual-security-reports ★1,213
-
HackerOne hackerone.com
Hacker Powered Security Report (2025) - Analyzes the evolving landscape of hacker-powered security, focusing on the integration of AI and the human element. Key insights reveal a significant surge in AI-related vulnerability reports and a growing trend of researchers upskilling…
-
Gurucul gurucul.com
Pulse AI SOC Report (2025) - Examines the state of artificial intelligence adoption within security operations centers, focusing on threat detection, workflow automation, and analyst burnout. Key findings reveal that 87% of organizations are currently deploying, piloting, or…
-
Gurucul gurucul.com
Insider Risk Report (2026) - Examines the escalating operational and financial burden of insider risks driven by widespread artificial intelligence adoption, expanding cloud environments, and fragmented security tooling. Key findings reveal that 90% of organizations experienced…
-
Guy Carpenter guidewire.com
US Cyber Industry Exposure Database (2025) - Analyzes the US cyber industry exposure and loss curve for 2025, detailing market conditions and providing benchmarks for risk transfer. Key findings indicate a heightened risk landscape due to deregulation and nation-state activity…
-
Guidepoint guidepointsecurity.com
Identity Access Management Maturity Report (2025) - Analyzes the current state of Identity and Access Management maturity across organizations, evaluating the effectiveness of their practices and investments. Key findings indicate that most organizations are underfunded and…
-
Guidepoint guidepointsecurity.com
GRIT Ransomware Annual Report (2026) - Threat actors continue to evolve in their tactics, techniques, and procedures with AI/LLM enabling more rapid adaptation and continuing to reduce barriers to entry for less-skilled and unskilled actors. Key findings include an in-depth…
-
Guardz guardz.com
SMB Threat Report (2025) - Analyzes the SMB threat landscape, highlighting the rise of phishing, cloud-based attacks, and identity-based breaches. The report reveals a shift towards AI-enhanced social engineering, stolen credentials as a primary attack vector, and the…
-
GSMA gsma.com
Post Quantum Cryptography For 5g Roaming (2026) - Examines the security implications of post quantum cryptography implementation for non terrestrial networks within global telecommunications. Key insights detail alignment across 24 pages of technical documentation referencing…
-
GSMA gsma.com
Security Landscape (2026) - Analyzes the evolving mobile telecommunications security landscape, focusing on critical threats such as software vulnerabilities, supply chain compromises, and the democratization of attack tools. Key findings highlight that the global scam economy…
-
Interpol group-ib.com
Africa Cyber Threat Assessment Report (2025) - Reveals a steep rise in cyber-related crime across the continent, with online scams, ransomware, business email compromise, and digital sextortion identified as the most prevalent threats. According to INTERPOL, cybercrime now…
-
Grip grip.security
SaaS Security Risks Report (2026) - Examines the state of SaaS and artificial intelligence security risks, highlighting how unmanaged enterprise adoption creates critical operational vulnerabilities. Key findings reveal that 100 percent of analyzed organizations operate…
-
GRF grfcpa.com
Top Risks Report (2026) - Examines the primary strategic, cybersecurity, and operational risks facing nonprofits and government contractors in the Washington DC region during 2026. Key findings indicate that 58 percent of organizations report an increase or stability in attack…
-
GreyNoise greynoise.io
State of the Edge Report (2026) - Investigates the evolving security landscape of decentralized edge infrastructure, focusing on the increasing exploitation of routers, firewalls, and remote access gateways. Data from the sensor network reveals a 40 percent increase in unique…
-
GreyNoise greynoise.io
Mass Internet Exploitation Report (2025) - Examines the evolution of mass internet exploitation and the rapid weaponization of newly disclosed vulnerabilities observed through a global network of passive sensors. Data indicates that attackers are increasingly prioritizing N-day…
-
Greyn Noise greynoise.io
Early Warning Signals Attacker Behavior Precedes New Vulnerabilities Report (2025) - Analyzes the correlation between spikes in attacker activity and subsequent CVE disclosures, particularly in edge technologies. The report reveals that in 80% of analyzed cases, attacker…
-
GRCEngineer grcengineer.com
The State of GRC (2026) - Examines the current state of governance, risk, and compliance practices by analyzing survey data from 795 industry professionals to identify trends in tool adoption and team structure. Key findings reveal that 59.1% of practitioners remain…
-
Clairfield International grandviewresearch.com
Cybersecurity Sector Report (2026) - Examines the cybersecurity market landscape in 2025, focusing on record-breaking merger and acquisition activity alongside shifting valuation trends. The sector recorded 400 deals with a total disclosed value exceeding 84 billion dollars…
-
Sweden government.se
National Strategy for Cybersecurity (2025) - Examines the national cybersecurity strategy and digital resilience framework implemented for the years 2025 to 2029. Key findings reveal that the government approach focuses on 2 core pillars and 8 specific strategic targets to…
-
Veeam go.veeam.com
Data Trust and Resilience Report (2026) - Examines the state of organizational cyber resilience and data protection, highlighting a significant disconnect between executive confidence and actual recovery performance. Key findings reveal that while 90 percent of security leaders…
-
OpenSystems go.open-systems.com
SASE Report (2026) - Examines the adoption of managed secure access service edge and zero trust architectures across hybrid enterprise environments. Key findings reveal that 76% of organizations cite heightened security requirements as the primary driver for replacing legacy…
-
Nametag go.nametag.co
Workforce Impersonation Report (2026) - Focuses on insider threats and adaptation of Enterprise security strategies. In 2025, a growing number of breaches that began with someone pretending to be a legitimate member of the workforce. Nearly every major breach now carries an…
-
Dashlane go.dashlane.com
State of Credential Security Report (2025) - Examines the state of credential security in the modern workplace, highlighting how artificial intelligence and shadow information technology expand the attack surface for organizations. Key findings reveal that 74 percent of…
-
The Global Cyber Alliance (GCA) globalcyberalliance.org
An international, cross-sector effort dedicated to reducing cyber risk.
-
Git Guardian gitguardian.com
State of Secrets Sprawl (2026) - Examines the state of secrets sprawl and security vulnerabilities, detailing the impact of rapid development cycles and AI adoption. Key findings reveal 28.65 million new hardcoded secrets in public GitHub commits during 2025, representing a 34…
-
GigaOm gigaom.com
A research firm offering practical, hands-on, practitioner-driven research for businesses.
-
Astra getastra.com
Cybersecurity Statistics Report (2026) - Analyzes the evolving cybersecurity landscape and the prevalence of diverse threat vectors including ransomware, malware, and social engineering tactics. Key findings reveal that cyberattacks occur every 39 seconds with an average of…
-
Chainguard get.chainguard.dev
The Cost of CVEs (2025) - Aanalyzes the financial impact of CVE management on organizations using containerized environments. Key findings indicate that mid-market organizations can unlock significant value through decreased risk $2.8M, increased revenue $2.2M, and faster…
-
Genetec genetec.com
State of Physical Security (2026) - Analyzes the current state of physical security, focusing on global trends and challenges in 2026. This report explores how the industry is adapting and how strategic innovation¹ is redefining what’s possible in physical security. Technology…
-
Gen Digital gendigital.com
Threat Report (2026) - Examines the evolving threat landscape of 2026, highlighting a strategic shift where malicious actors increasingly abuse established digital trust and routine workflows. Key findings reveal that tech support scams surged by 61.6% to reach 20.3 million…
-
Balbix gartner.com
State of Security Posture Report (2026) - Examines the state of security posture management and reveals that cybersecurity teams struggle to measure and improve their defenses as organizations transition to the cloud. Key findings indicate that 62% of organizations lack…
-
Gartner gartner.com
A technology research and consulting firm which offers private paid consulting as well as executive programs and conferences.
-
Futuriom futuriom.com
Top Cloud and AI Infrastructure Trends (2026) - Surveys the top cloud and AI infrastructure trends for 2026, identifying leading private companies and market dynamics. Key findings reveal aggregate AI capital expenditure spending is approaching $1 trillion annually.
-
Frost & Sullivan frost.com
A consulting firm offering market research and analysis in cybersecurity, with particular focus on emerging technologies and market opportunities.
-
Fortinet fortinet.com
360 Protection AWS (2026) - Examines cloud and artificial intelligence workload security within Amazon Web Services environments, highlighting the complexities of managing dynamic cloud infrastructures and expanding threat landscapes. Key findings reveal that 69% of…
-
Fortinet fortinet.com
Insider Risk Report (2025) - Examines the state of enterprise insider risk management and highlights current operational maturity levels, tool effectiveness, and visibility gaps across modern hybrid environments. Key insights reveal that 77% of organizations experienced insider…
-
Fortinet fortinet.com
Web Application Security Report (2026) - Examines the security posture of web applications and APIs in the context of artificial intelligence adoption, highlighting a widening readiness gap between modernization and operational control. Key findings reveal that 74% of…
-
Fortinet fortinet.com
Global Threat Report (2025) - Analyzes the evolving global threat landscape and attacker tactics. Key findings reveal a surge in cyber reconnaissance activity driven by automated scanning and a significant shift in attacker focus towards cloud environments and post-exploitation…
-
Fortinet fortinet.com
Cloud Security Report (2026) - Analyzes the state of cloud security by surveying 1,163 cybersecurity leaders to evaluate the impact of infrastructure complexity on organizational risk and operational maturity. Key findings reveal that 69% of organizations identify tool sprawl…
-
Fortinet fortinet.com
Threat Predictions (2026) - Analyzes the acceleration of cybercrime and its industrialization, highlighting the increasing speed and scale of attacks. Key insights reveal that AI-driven autonomous agents and the convergence of fraud and cybercrime will drive unprecedented…
-
Fortinet fortinet.com
Data Security Report (2025) - Examines the current state of enterprise data protection and reveals that 77% of organizations experienced insider-related data loss over an 18-month period. Key findings indicate that 72% of companies lack visibility into how users interact with…
-
Forrester forrester.com
Iot Security Solutions Report (2025) - Evaluates the landscape of IoT security solutions for Q3 2025, categorizing top vendors like Nozomi Networks and Claroty into Leaders, Strong Performers, and Contenders. The report emphasizes that while asset discovery is foundational…
-
Forrester Research forrester.com
An advisory company that offers paid research, consulting, and event services specialized in market research for information technology.
-
Forescout forescout.com
Riskiest Devices (2025) - Analyzes millions of devices to identify the most vulnerable assets in enterprise networks, revealing that network equipment has overtaken endpoints as the riskiest IT category. Key findings highlight a 15% increase in industry-wide risk, the…
-
Forescout forescout.com
Threat Review (2025) - Analyzes the threat landscape of the first half of 2025, emphasizing the persistence of known vulnerabilities and the blurring distinction between hacktivist and state-sponsored actors. Key insights highlight that 47% of newly exploited vulnerabilities…
-
Fluid Attacks fluidattacks.com
State Of Attacks (2026) - Analyzes the state of cybersecurity and vulnerability management across diverse software development environments, documenting trends in risk exposure and remediation efficiency throughout 2025. Key findings reveal that while the vulnerability…
-
Flashpoint flashpoint.io
Global Threat Intelligence Report (2026) - Analyzes the evolving global threat landscape, focusing on the convergence of artificial intelligence, identity exploitation, and automated attack frameworks. Key findings reveal a 1,500 percent surge in illicit AI discussions…
-
The Forum of Incident Response and Security Teams (FIRST) first.org
Provides platforms, means and tools for incident responders to always find the right partner and to collaborate efficiently.
-
FINOS finos.org
State of Open Source in_Financial Services (2025) - Analyzes the current state of open source software adoption and strategic maturity within the global financial services sector. Key findings indicate that 87 percent of organizations now view open source as critical to their…
-
Infoblox financialpost.com
DNS Threat Landscape Report (2026) - Examines the escalating scale of industrialized cybercrime and automated threat infrastructures through telemetry analysis of trillions of DNS queries. Key findings reveal that 22 percent of over 120 million newly registered domains were…
-
FIDO Alliance fidoalliance.org
An open industry association with a focused mission: authentication standards to help reduce the world's over-reliance on passwords.
- next page of items loading…
