Annual Security Reports
508 items from jacobdjwilson/awesome-annual-security-reports ★1,213
-
Cerbos solutions.cerbos.dev
Authorization Maturity Model CISO Benchmark (2026) - Evaluates the evolving landscape of authorization maturity for modern enterprises, specifically addressing the critical governance requirements for artificial intelligence agents and autonomous workloads. Key findings…
-
Gravitee softwareseni.com
The AI Governance Gap (2026) - Examines the critical governance gap in enterprise artificial intelligence deployments, focusing on the architectural failure to secure autonomous agents with appropriate identity and access controls. Research indicates that 71 percent of large…
-
Snyk snyk.io
Cloud Native Application Security Report (2026) - Examines the state of cloud native application security, highlighting deployment practices and vulnerability management trends. Key findings reveal that over 56 percent of organizations experienced a security incident involving…
-
Search Light Cyber slcyber.io
The Correlation Between Dark Web Exposure And Cybersecurity Risk (2025) - Analyzes the relationship between dark web exposure and organizational cybersecurity risk, utilizing data from over 9,000 organizations to validate the predictive nature of pre-attack intelligence. Key…
-
Six Map sixmap.io
Research Energy Sector Exposure Assessment (2025) - Analyzes the external exposures of 21 leading U.S. energy providers to assess their security posture and identify systemic risks. The study found nearly 40,000 hosts with over 58,000 exposed services, including a significant…
-
SISA Sappers sisainfosec.com
Report (2026) - Investigates the evolving payment security landscape in 2026, focusing on the rise of autonomous agentic commerce, upstream identity fraud, and the critical migration toward post-quantum cryptographic standards. Key findings reveal that the transition to…
-
Wallarm siliconangle.com
API Threat Stats Report (2026) - Examines the evolving landscape of API threats and risks in 2025, highlighting how attackers exploit repeatable failures in identity, access control, and exposed interfaces. Key findings reveal that 36% of published AI vulnerabilities involve…
-
SilentPush silentpush.com
Threat Actor Study (2025) - Analyzes global threat actor activity and infrastructure trends from 2024, focusing on AI-powered scaling, infrastructure laundering, and Access-as-a-Service models. Key findings highlight persistent state-sponsored APTs, the evolution of FIN7…
-
Shieldworkz shieldworkz.com
Global OT And IoT Threat Landscape Report (2025) - Analyzes the global OT and IoT threat landscape, highlighting the increasing sophistication and strategic intent of cyberattacks targeting critical infrastructure.
-
Google services.google.com
Cybersecurity Forecast (2026) - Analyzes the evolving cybersecurity landscape for 2026, focusing on the impact of artificial intelligence, persistent cybercrime, and nation-state activities. Key insights reveal adversaries fully embracing AI for sophisticated attacks, a…
-
Seqrite seqrite.com
India Cyber Threat Report (2026) - Analyzes the evolving cyber threat landscape in India by examining telemetry data from over eight million endpoints to identify critical vulnerabilities and attack patterns. Key findings reveal that Trojans and file infectors constitute nearly…
-
Semperis semperis.com
Ransomware Risk Report (2025) - Analyzes the global ransomware landscape, evaluating attack frequency, success rates, and the critical role of identity infrastructure. Key findings indicate a modest global decrease in ransomware success, yet 78% of organizations were still…
-
Security Industry Association securitysystemsnews.com
Security Megatrends (2026) - Examines the evolving landscape of security technology and its integration into broader business operations. Key insights reveal a significant shift towards AI-driven software solutions and the reinvention of hardware to provide richer data, while…
-
SecurityScorecard securityscorecard.com
Supply Chain Cybersecurity Trends Report (2026) - Examines the current state of third-party risk management and the growing disconnect between leadership confidence and actual supply chain security maturity. Key findings reveal that while 90 percent of leaders believe they can…
-
Security Scorecard securityscorecard.com
State of South Koreas Cybersecurity (2026) - Analyzes the cybersecurity posture of South Korea’s top one hundred publicly traded companies by evaluating externally observable risk signals and supply chain dependencies. Findings reveal that 46 percent of these organizations…
-
Security Score Card securityscorecard.com
Third Party Breach Report (2025) - Analyzes the landscape of third-party cyber risk and its impact on organizations globally. Key findings indicate a significant increase in third-party breaches, with Retail & Hospitality and Technology sectors experiencing the highest…
-
The Information Security Forum (ISF) securityforum.org
A global, independent organization dedicated to benchmarking and sharing best practices in information security.
-
Symantec security.com
Ransomware Threat Landscape (2026) - Analyzes the evolving ransomware threat landscape and the shift toward encryptionless extortion tactics during 2025. While traditional ransomware attacks saw a marginal 0.8 percent increase, the total volume of extortion incidents surged by…
-
Securtas securitas.uk.com
Annual Intelligence Estimate Report (2026) - Examines the global corporate security and risk landscape for 2026, providing comprehensive threat assessments across multiple regional sectors and critical infrastructure domains. Key findings highlight that 100 percent of evaluated…
-
Canada secureworld.io
The State of Cybersecurity in Canada (2025) - Analyzes the evolving cybersecurity landscape in Canada, focusing on the critical risks posed by supply chain vulnerabilities, cloud misconfigurations, and a persistent national talent shortage. Key findings reveal that IoT and…
-
Kaspersky securelist.com
Security Services Global Report (2026) - Analyzes global threat intelligence and security service metrics to uncover prominent adversary tactics and regional targeting trends. Key findings reveal that the government sector accounts for 19 percent of attacks while ransomware…
-
Saviynt saviynt.com
AI Identity Risk Report (2026) - Examines the security risks and governance challenges associated with the rapid enterprise adoption of artificial intelligence identities and autonomous agents. Key findings reveal that 92% of organizations lack full visibility into their…
-
SANS sans.org
Cyber Threat Hunting Survey (2025) - Analyzes the decade-long evolution of threat hunting capabilities within organizations, addressing persistent challenges posed by AI adoption and cloud environments.
-
SANS sans.org
SOC Survey (2025) - Focuses on the structure, staffing, and challenges of modern Security Operations Centers based on the 2025 SANS SOC Survey. Key findings reveal that while core SOC functions remain consistent, there's a growing interest in cloud-native security operations…
-
SANS sans.org
AI Survey (2025) - Analyzes the impact of AI on cybersecurity, three years after the introduction of generative AI. The survey reveals that security teams are lagging in AI adoption, with only half using it for cybersecurity tasks, while 81% express concern over AI-powered…
-
SANS sans.org
Detection and Response Survey (2025) - Surveys the current landscape of detection and response operations, focusing on how organizations manage escalating cloud complexity and persistent resource constraints. Data from the global respondent base indicates that banking…
-
SANS sans.org
State Of ICS Security (2025) - Examines the current state of industrial control systems and operational technology security by analyzing incident trends, regulatory impacts, and defensive maturity across critical infrastructure sectors. Key findings reveal that while 50 percent…
-
SANS Institute sans.org
A private U.S. for-profit company which conducts research for consumers of their cybersecurity training and certifications.
-
Salt salt.security
Future of Agentic AI Report (2025) - Investigates the critical role of application programming interfaces in supporting agentic artificial intelligence and the resulting security challenges organizations face as they scale these autonomous systems. Findings reveal that while 64…
-
Salt salt.security
State of AI and API Security (2026) - Analyzes the structural evolution of application programming interfaces as the operational backbone of autonomous artificial intelligence systems across global enterprise networks. Findings reveal that 32 percent of surveyed organizations…
-
SailPoint sailpoint.com
The Year of The AI Agent (2026) - Examines the security implications and governance challenges surrounding the rapid enterprise adoption of autonomous artificial intelligence agents. Key findings reveal that while 91% of organizations are currently deploying or evaluating these…
-
Sail Point sailpoint.com
Horizons Of Identity Security (2025) - Examines the evolving landscape of identity security and organizational maturity, highlighting its transformation from foundational control to a critical security frontier. Key findings highlight the potential for strategic investments to…
-
Baird rwbaird.com
Disruptors (2026) - Examines the landscape of private security and infrastructure software companies, profiling 29 influential market vendors across distinct operational categories. Key findings reveal that 70% of these evaluated organizations specialize in advanced cloud…
-
RPC rpclegal.com
Annual Insurance Review (2026) - Examines the evolving landscape of insurance risks, focusing on the intersection of artificial intelligence, cybersecurity, and emerging litigation trends in the United States. Key findings indicate that while cyber claim frequency remained…
-
Riskrecon riskrecon.com
Ripples Across The Risk Surface (2025) - Investigates the prevalence and financial impact of multi-party ripple incidents, which occur when a single cybersecurity breach propagates across multiple organizations. Analysis of over 1,500 incidents reveals that while ripple events…
-
Reversing Labs reversinglabs.com
Software Supply Chain Security Report (2026) - Examines the evolving landscape of software supply chain security, highlighting how attackers increasingly exploit open-source ecosystems and CI/CD workflows to achieve persistence. Research reveals a 73% increase in malicious…
-
Prophet resources.prophetsecurity.ai
State Of AI In Secops (2025) - Focuses on the challenges and opportunities surrounding the adoption of AI in Security Operations Centers. The report reveals that a significant percentage of alerts are ignored, leading to critical breaches, and highlights the growing…
-
Dataminr resources.dataminr.com
Cyber Threat Landscape Report (2026) - Analyzes the evolving 2025 cyber threat landscape by examining the surge in sophisticated threat actor activity, systemic vulnerability re-exploitation, and the critical need for context-aware risk prioritization. Key findings reveal a 225…
-
Anthropic resources.anthropic.com
Agentic Coding Trends Report (2026) - Examines the evolution of agentic coding in 2026, focusing on the transition from individual AI assistants to coordinated multi-agent systems that manage complex software development lifecycles. Research indicates that while developers…
-
Cobalt resource.cobalt.io
State of Pentesting (2026) - Examines the current state of offensive security and penetration testing by synthesizing data from thousands of assessments and a survey of 450 industry professionals. Findings reveal a significant remediation gap where top performers resolve…
-
Relia Quest reliaquest.com
Annual Threat Report (2025) - Analyzes 2024 cyber-threat trends, focusing on initial access tactics and their effectiveness. Key findings reveal inadequate logging as the root cause of most breaches, with session hijacking bypassing multi-factor authentication in all successful…
-
RedHelix redhelix.com
Cyber Security Trends Report (2026) - Examines the evolving cyber threat landscape in 2026, highlighting the convergence of artificial intelligence, identity-centric exploitation, and commercialized ransomware operations across enterprise environments. Key findings reveal that…
-
RedHat redhat.com
State of Cloud Native Security (2026) - Examines the state of cloud-native security and governance maturity across modern enterprise environments. Key insights reveal that 97% of organizations experienced at least one security incident in the past year, while 79% report that…
-
Red Canary redcanary.com
Threat Detection Report (2026) - Analyzes the evolving cybersecurity landscape by examining over one hundred thousand confirmed threats across diverse infrastructure and identity environments. Key findings reveal that identity based attacks surged by 850 percent year over year…
-
Recorded Future recordedfuture.com
Payment Fraud Intelligence Report (2025) - Analyzes the evolving landscape of payment fraud, documenting how threat actors are leveraging industrial-scale support networks and artificial intelligence to maximize the impact of stolen financial data. Key findings reveal that…
-
Recorded Future recordedfuture.com
State of Security (2026) - Analyzes the global threat landscape in 2025, focusing on how geopolitical fragmentation and the erosion of diplomatic norms have accelerated cyber espionage and hybrid conflict. Key findings reveal a 33% increase in new ransomware variants compared…
-
Recorded Future recordedfuture.com
Malware And Vulnerability Trends (2025) - Analyzes malware and vulnerability trends observed in the first half of 2024, focusing on exploitation of remote access and security software. Key insights reveal a significant 103% increase in Magecart infections and the continued…
-
Recorded Future recordedfuture.com
Cloud Threat Hunting And Defense Landscape (2025) - Analyzes the evolving cloud threat landscape by identifying five primary attack vectors posing significant risk to cloud environments. Key insights reveal that initial compromises often stem from misconfigured cloud endpoints…
-
Recorded Future recordedfuture.com
State Of Threat Intelligence (2025) - Analyzes the adoption and maturity of threat intelligence within enterprise cybersecurity, focusing on investment trends and strategic decision-making. Key findings reveal that 76% of organizations invest over $250,000 annually, with 91…
-
Reco reco.ai
State Of Shadow AI Report (2025) - Examines the pervasive adoption and inherent security risks of unsanctioned AI tools across enterprises. Key findings reveal OpenAI accounts for 53% of all shadow AI usage, while many popular tools lack fundamental security controls and…
- next page of items loading…
