Annual Security Reports
508 items from jacobdjwilson/awesome-annual-security-reports ★1,213
-
Rapid7 rapid7.com
Threat Landscape Report (2026) - Investigates the acceleration of the global threat landscape and the collapse of predictive lead times for vulnerability exploitation. Key findings reveal that confirmed exploitation of high severity vulnerabilities increased by 105 percent year…
-
Rapid7 rapid7.com
Initial Access Brokers Report (2026) - Investigates the evolving landscape of initial access brokers across five major cybercrime forums, documenting a strategic shift toward targeting larger enterprises with high-value, high-privilege credentials. Key findings reveal that the…
-
The Rand Corporation rand.org
An American not-for-profit organization which conducts research and analysis on various aspects of cybersecurity and cyber policy focused on national security.
-
United States Department of Defense public.cyber.mil
State of DevSecOps (2025) - Focuses on the adoption of DevSecOps practices within the United States Department of Defense. A key finding is the Air Force's launch of a new software directorate, highlighting a move towards integrating security earlier in the software development…
-
Norwegian Police pst.no
Threat Assessment (2026) - Analyzes the evolving landscape of criminal threats in Norway, focusing on the professionalization of criminal networks and their increasing exploitation of digital infrastructure. Key findings reveal that violence and threats accounted for over 10…
-
Prowler prowler.com
State of Cloud Security Report (2026) - Investigates the current state of cloud security operations and the practical integration of artificial intelligence within modern enterprise environments. Findings reveal that security teams manage an average of 71 incidents per week…
-
Proofpoint proofpoint.com
Voice of the CISO Report (2025) - Examines the challenges, expectations, and priorities of CISOs in 2025, focusing on the impact of AI and persistent threats. The report reveals a growing concern among CISOs regarding potential cyberattacks and data loss, despite confidence in…
-
Proofpoint proofpoint.com
Data Security Landscape Report (2025) - Investigates the current state of enterprise data security by analyzing the frequency of data loss incidents, the impact of human behavior, and the emerging risks associated with artificial intelligence and agentic workspaces. Research…
-
Proofpoint proofpoint.com
Cyber Insecurity Healthcare (2025) - Examining the ongoing cyber insecurity within the healthcare industry, detailing its financial repercussions and direct impact on patient care. Key findings indicate 93 percent of organizations experienced an average of 43 cyberattacks, with…
-
Apono prnewswire.com
State of Agentic AI Cyber Risk Report (2026) - Examines the state of agentic AI adoption and the associated cybersecurity risks and organizational preparedness. Key findings reveal that while 100% of cybersecurity leaders agree agentic AI attacks would be more damaging than.
-
Hyperproof prnewswire.com
IT Risk and Compliance Benchmark Report (2026) - Analyzes the current state of governance, risk, and compliance programs by evaluating organizational structures, framework adoption, and the operational challenges of scaling security readiness. Key findings indicate that while…
-
Ponemon Institute ponemon.org
Pre-eminent research center dedicated to privacy, data protection, and information security policy (often partners with industry for annual reports).
-
Plume plume.com
Residential Proxy Malware (2026) - Examines the proliferation of residential proxy networks within Android applications, highlighting how sideloaded streaming tools quietly enroll compromised devices into monetization frameworks without user consent. Key findings reveal that…
-
Nexusguard plataformamedia.com
DDoS Threat Analysis and Industry Perspectives (2025) - Examines distributed denial of service trends and regional threat distributions across global digital infrastructure. Key findings reveal that total attacks surged by 97.3 percent to exceed 686,000 incidents, while the…
-
Pindrop pindrop.com
Voice Intelligence And Security Report Report (2025) - Examines the evolving landscape of voice intelligence and security, focusing on the impact of generative AI on fraud. Key findings reveal a more than 1,300% surge in deepfake attacks and a 26% increase in overall fraud…
-
Pillar pillar.security
State Of Attacks On Genai (2025) - Analyzes real-world attacks on Generative AI applications, revealing critical security vulnerabilities. Key findings indicate a 90% data leakage rate in successful attacks, with adversaries requiring only 42 seconds and an average of 5…
-
Picus picussecurity.com
Red Report (2026) - Analyzes the evolution of global adversary tradecraft by mapping over 15.5 million malicious actions to the MITRE ATT&CK framework. Findings reveal a strategic shift toward long-lived persistence, as 80% of the top ten techniques now prioritize evasion while…
-
Picus picussecurity.com
Blue Report (2025) - Developed by Picus Labs, this annual study is based on over 160 million attack simulations performed on the Picus Security Validation Platform, providing a comprehensive view of how security products and configurations perform across modern enterprise…
-
Pentera pentera.io
AI Security Exposure Benchmark (2026) - Investigates the current state of enterprise artificial intelligence adoption and its impact on security posture, highlighting the disconnect between rapid deployment and limited governance. Key findings reveal that while 100 percent of…
-
PDI pditechnologies.com
Cyber Threat Landscape Report Q1 (2026) - Analyzes the cyber threat landscape for the first quarter of 2026 by examining more than four trillion security events collected across global environments. Key findings reveal a staggering 247 percent surge in exploit activity…
-
HPE paths.ext.hpe.com
Zero Trust Security Report (2026) - Examines the state of Zero Trust adoption and the execution gap across modern hybrid enterprises. Key findings reveal that while 82 percent of surveyed organizations view Universal Zero Trust Network Access as essential, only 17 percent have…
-
Palo Alto paloaltonetworks.com
Global Incident Response Report (2026) - Analyzes security findings and threat trends reported by PaloAlto for 2026, examining key attack patterns, vulnerability data, and defensive recommendations drawn from data collected across hundreds of security practitioners. Findings…
-
ORDR ordr.net
Cybersecurity Statistics Report (2026) - Examines the evolving cybersecurity landscape and the financial impact of data breaches across various industries in 2026. Global cybercrime costs are projected to reach 10.5 trillion dollars this year, while organizations utilizing…
-
Orca orca.security
Estimating Return on Investment for the Cloud (2026) - Evaluates the economic impact of transitioning to a unified cloud security platform by comparing fragmented legacy toolsets against modern agentless and artificial intelligence capabilities. Analysis demonstrates that a…
-
Orca orca.security
State of AppSec Report (2026) - Analyzes the current state of application security across the modern software delivery lifecycle by evaluating telemetry from over 1,000 production organizations. Findings reveal that 78 percent of organizations operate with critical…
-
Orca orca.security
State of Cloud Security Report (2025) - Analyzes security challenges in multi-cloud environments, with a focus on AI risk, data exposure, and neglected assets. Key findings reveal that 62% of organizations have at least one vulnerable AI package, 38% expose sensitive databases…
-
Orange Cyber Defense orangecyberdefense.com
Security Navigator (2026) - Evaluates the landscape of global cybersecurity threats and incident response performance through extensive data collected from managed security operations. Findings reveal that 13.7 percent of potential incidents are confirmed as true positives…
-
Opswat opswat.com
State Of File Security Report (2025) - Examines the current state of file security, detailing prevalent threats, management practices, and the integration of advanced technologies. Key findings reveal that file-based breaches have already cost organizations an average of $2.7M…
-
The Open Source Security Foundation (OpenSSF) openssf.org
A cross-industry collaboration to improve the security of open source software.
-
OpenAI openai.com
Agent Security Enterprise (2026) - Assesses enterprise risk management frameworks for autonomous AI deployments across five core security principles. The guidance emphasizes zero-trust architectures, task-scoped authorization, and boundary enforcement to contain blast radius…
-
Omdia omdia.tech.informa.com
A global technology research powerhouse focusing on cybersecurity market analysis and digital transformation.
-
Omada omadaidentity.com
State Of Identity Governance (2026) - Examines the current state of identity governance and security, focusing on the challenges of managing non-human identities and the rapid adoption of artificial intelligence within enterprise environments. Research involving 577 security…
-
Okta okta.com
Secure Sign In Trends Report (2025) - Organizations are maintaining the steady adoption of traditional defenses while rapidly shifting toward advanced security standards. The analysis reveals that while overall multi-factor authentication adoption within the workforce context…
-
Okta okta.com
Secure Identity Commitment (2025) - Examines the Secure Identity Commitment initiative launched by Okta to fortify enterprise identity infrastructure through product innovation and rigorous internal security hardening. Internal data from late 2025 reveals that the platform…
-
OASIS Open oasis-open.org
A non-profit consortium that drives the development of open standards for the global information society, including cyber threat intelligence sharing (STIX/TAXII).
-
Norwegian National Security Authority (NSM) nsm.no
Norway's expert body for information and object security.
-
Nozomi nozominetworks.com
Networks OT IoT Security Report (2025) - Analyzes operational technology and internet of things cybersecurity trends in the second half of 2024. Key findings reveal a significant increase in sophisticated attacks targeting industrial control systems, highlighting the growing…
-
NMFTA nmfta.org
Transportation Industry Cybersecurity Trends Report (2026) - Analyzes the 2026 cybersecurity landscape for the transportation industry, characterizing the convergence of cargo theft and cybercrime as a comprehensive operational resilience challenge. Key findings identify the…
-
National Institute of Standards and Technology (NIST) nist.gov
A U.S. agency that develops fundamental cybersecurity frameworks and guidelines.
-
Japan National Center of Incident Readiness and Strategy for Cybersecurity (NISC) nisc.go.jp
Japan's central organization for national cybersecurity strategy and incident response.
-
Health ISAC newswire.com
Annual Threat Report (2026) - Analyzes the evolving threat landscape within the global health sector, focusing on the systemic risks posed by ransomware, supply chain exploitation, and the integration of insecure medical devices. Key findings from a survey of nearly 250…
-
Norton newsroom.gendigital.com
Cyber Safety Insights Report (2025) - Examines the cyber safety landscape for children, focusing on AI integration and cyberbullying trends. Key insights reveal that 36% of global parents notice their children using AI for companionship, while the US leads with 24% of children…
-
Cisco newsroom.cisco.com
Talos Year In Review (2025) - Examines the threat landscape of 2025, detailing how adversaries weaponized new vulnerabilities and targeted legacy infrastructure. Key findings reveal a 178% surge in device compromise attacks targeting multi-factor authentication, alongside a 74…
-
BlackDuck news.blackduck.com
BSIMM16 (2026) - Analyzes the maturity and evolution of software security initiatives across diverse industry verticals by documenting observed development practices. Studies conducted on 111 participating organizations reveal that successful programs prioritize scaling…
-
Netskope netskope.com
VPNs Under Siege Report (2026) - Examines the state of remote access security and the transition from legacy virtual private networks and network access control systems to zero trust network access. Key findings reveal that 56 percent of organizations experienced a virtual…
-
Netskope netskope.com
AI Security Report (2026) - Examines the state of artificial intelligence security and governance based on a comprehensive survey of 1253 cybersecurity professionals. Key findings reveal that while 90% of organizations increased their security budgets, 94% still report critical…
-
Netskope netskope.com
Cloud and Threat Report (2026) - Analyzes the enterprise threat landscape and the rapid, widespread adoption of generative artificial intelligence across corporate environments. Key findings reveal a sixfold increase in prompt volume and a doubling of data policy violations…
-
Netskope netskope.com
Unified Data Security (2026) - Examines the state of data security tooling and visibility gaps across enterprise environments, focusing on the challenges of tracking sensitive information as it moves into artificial intelligence workflows. Key findings reveal that 58 percent of…
-
Netscout netscout.com
DDoS Threat Intelligence Report (2025) - Designed to quickly equip readers with actionable intelligence, it delivers insights critical for ongoing network operations and strategic planning. The digital battlefield of 2025 is defined by an unprecedented escalation in DDoS…
-
Net Diligence netdiligence.com
Cyber Claims Study (2025) - Analyzes over 10,000 cyber insurance claims from 2020 to 2024 to evaluate the financial impact of incidents across small-to-medium enterprises and large organizations. Key findings reveal that ransomware and business email compromise remain the…
- next page of items loading…
