Security Report

The 2025 IDSA identity security report shows improvement across many identity-risk metrics, with identity-related incidents plateauing or declining and phishing still the most common threat. It also highlights the growing impact of AI and non-human identities on identity management, alongside continued adoption of Zero Trust and strong interest in digital wallets. #IDSA #ArtificialIntelligence #ZeroTrust #DigitalWallets…

HardenStance’s April 2025 briefing from GASS London highlights a coordinated shift in anti-scam efforts, with governments, banks, telcos, and platforms taking greater responsibility for disrupting fraud and improving consumer protection. The report emphasizes stronger intelligence sharing, better regulation, more effective victim recovery, and a move away from blaming users as scammers adapt quickly to new…

Allot is strengthening Smart NetProtect with a hybrid DDoS defense model that adds out-of-band detection and flexible mitigation options for telecom operators. The report highlights surging DDoS volumes, record-breaking attacks, and growing pressure on telco networks from botnets, 5G, and nation-state activity. #Allot #SmartNetProtect #Aisuru #RapperBot #VoltTyphoon #Kyivstar #ENISA #Cloudflare

HardenStance’s MWC 2025 review says telco cybersecurity is improving, but only incrementally, with regulators, vendors, and operators increasingly focused on scam protection, network hardening, and AI-driven security. The report highlights major gaps in telco preparedness alongside rising threats from AI fakes, China-nexus intrusion activity, and continued pressure to deploy practical protections such as DNS filtering,…

HardenStance’s RSAC 2025 briefing shows that AI was again the dominant theme, with vendors focusing on securing generative AI use by employees and embedding agentic AI into security operations. The report highlights major product launches and research from Akamai, Cisco, CrowdStrike, Google, Palo Alto Networks, Qualys, and Sandbox AQ as the industry shifts from AI…

Deloitte’s 5th Global Future of Cyber Survey shows cyber leaders are more mature, better funded, and increasingly aligned with business strategy, but major gaps still remain between confidence and true readiness. The report highlights five paradoxes—especially around business alignment, executive influence, vendor sprawl, breach interpretation, and budgeting stability—while showing that Frontunners consistently outperform Followers and…

Trend Micro’s 2025 Cloud Security Report finds that cloud risk is worsening while confidence in visibility, detection, and coordinated response remains low across multi-cloud environments. The report highlights ransomware, zero-day vulnerabilities, unauthorized access, phishing, and API exposure as major concerns, while showing that organizations are increasingly turning to automation, unified platforms, and AI to improve…

The 2025 VPN Exposure Report finds that traditional VPNs are increasingly risky and operationally unsustainable, with organizations facing frequent attacks, poor user experiences, and growing confidence in Zero Trust alternatives. Key trends include the rise of VPN-related breaches, the adoption of ZTNA and SSE, and the shift toward replacing VPNs entirely in modern remote access…

Fortinet’s 2025 Web Application Security Report shows that organizations are struggling with visibility, API security, and cloud misconfigurations while facing rising breaches, bot activity, and AI-driven attacks. The report highlights a shift toward AI, automation, and tool consolidation as companies try to close security gaps and improve readiness across hybrid and multi-cloud environments. #Fortinet #Optus…

This ATIS report explains how zero trust architecture can secure 5G cloud and operational environments as networks shift from operator-owned infrastructure to complex multi-vendor and hyperscale cloud deployments. It emphasizes continuous monitoring, micro-segmentation, IAM, SIEM/SOAR, eBPF, AI/ML, and shared standards work across 3GPP, ETSI, O-RAN, CISA, NIST, MITRE FiGHT, and GSMA MoTIF to address threats…

Australia’s Annual Cyber Threat Report 2024–25 shows a sharper threat environment, with more hotline calls, more incidents, rising financial losses, and a growing focus on state-sponsored activity against critical infrastructure, telecommunications, and logistics. The report also highlights escalating ransomware, credential theft, phishing, DDoS, and edge-device exploitation, while urging stronger resilience measures such as MFA, logging,…

Chainalysis’ 2025 Crypto Crime Report shows that crypto crime became more diversified and professionalized in 2024, with stablecoins dominating illicit volume while ransomware, scams, stolen funds, sanctions activity, and organized crime all shifted in response to enforcement and market changes. The report highlights major themes such as North Korean hacking, Huione Guarantee’s role in laundering…

Waterfall’s OT Cyber Threat Report 2025 shows that physical-consequence OT attacks continued to rise in impact, with a 146% increase in affected sites and 76 incidents in 2024. The report highlights growing nation-state activity, persistent ransomware pressure, and new ICS-capable malware such as FrostyGoop, IOControl, and Fuxnet, with #Sandworm #VoltTyphoon #SaltTyphoon #FrostyGoop #IOControl #Fuxnet #CrowdStrike…

Vanta’s third State of Trust report shows that AI is accelerating risk faster than most organizations can govern it, while budgets, staffing, and compliance time remain stuck. The report highlights rising vendor breaches, growing trust demands, and the rapid adoption of agentic AI—alongside major gaps in control, readiness, and oversight. #Vanta #agenticAI #AI

Bitsight’s 2025 report shows that global digital supply chains are vast, deeply interconnected, and concentrated around a relatively small set of critical providers that often sit behind major industries and markets. It also finds that provider organizations generally have a larger attack surface and weaker security posture than consumers, while some high-market-share providers still have…

At-Bay’s 2025 InsurSec Report shows that cyber claims rose sharply in 2024, driven by more ransomware, growing third-party losses, and persistent financial fraud. The report highlights major incidents such as the CDK Global outage, the expansion of ransomware groups, and the growing impact of email-based deception. #AtBay #CDKGlobal #MOVEit #LockBit #BlackBasta #BlackSuit

Truesec’s 2025 Threat Intelligence Report shows that cybersecurity investments are helping some large Nordic enterprises reduce ransomware impact, while attackers shift toward smaller organizations, identity-based intrusions, data theft, and AI-assisted social engineering. The report also highlights major law-enforcement disruptions of criminal infrastructure, escalating geopolitical cyber sabotage, and the growing use of ransomware-as-a-service by groups such…

Europol’s IOCTA 2025 shows how stolen data has become a core commodity in cybercrime, fueling fraud, account takeovers, extortion, and access brokering across dark web forums and encrypted channels. The report highlights the growing impact of infostealers, ClickFix, vishing, and generative AI, while also noting major law enforcement disruptions to Lumma, LabHost, Cracked, and Nulled.…

DigiCert’s UltraDDoS Protect report shows a sharp decline in DDoS activity in the first half of 2025, with attackers increasingly favoring short, low-volume, single-target campaigns after enforcement actions such as Operation PowerOff disrupted major DDoS-for-hire services. Financial Services was the most targeted industry, while Saudi Arabia, the United States, and Sweden saw the highest attack…

The 2025 Annual Threat Assessment describes a broad and intensifying threat environment in which cyber, criminal, terrorist, and state actors all pressure U.S. security, infrastructure, and economic stability. It highlights major risks from China, Russia, Iran, and North Korea, along with transnational criminal networks and terrorist groups such as ISIS and al-Qa‘ida, and notes how…