Threat Landscape stories
Federal contractors face rising scrutiny as speakers warned CMMC and AI are becoming central to procurement, resilience and national security.
Security teams could cut false positives and speed fixes as the new tool ties vulnerability alerts to live network device states.
More consumers are losing larger sums to fraud as fake invoice and investment scams drive the biggest financial harm, F-Secure says.
AI-related training is shifting as prompt injection, model exploitation and agent hijacking shape how security teams prepare for live attacks.
Many smaller firms lack the expertise and controls to counter AI-enabled phishing and deepfakes, Sage's research shows.
Enterprises are testing only about 32% of their attack surface, leaving many assets outside regular security checks as threats grow faster.
The findings show many firms still leave internet-facing databases and admin tools open, giving attackers easy routes before flaws are even published.
AI systems and social engineering tests proved especially risky, as CyberCX found severe weaknesses in half and 77% of cases respectively.
A smaller band of operators is driving most incidents, leaving companies facing fewer but more organised ransomware gangs.
Undisclosed attacks outnumbered public cases by nine to one, with healthcare and government still bearing the brunt of the ransomware threat.
Pressure is mounting on security teams as non-human identities and AI tools outpace controls, leaving APAC firms exposed to misuse.
A widening visibility gap is leaving organisations exposed, with AI now involved in 83 per cent of reported breaches, Gigamon found.
Businesses face tighter cyber and governance expectations as ministers push a resilience Bill and voluntary digital ID schemes across the UK.
Exposure of operational technology is leaving industrial operators most vulnerable, with attacks able to halt production and disrupt essential services.
Most Australian organisations are using or planning AI agents for security tasks before formal controls are in place, Semperis found.
Thailand has joined the ransomware top 10 as fewer groups now drive most attacks, raising the cost of each breach for businesses.
Mobile users are most at risk as quishing has surged in New Zealand, with scammers exploiting delivery and parking prompts.
Ransomware pressure on Canadian firms is intensifying as AI speeds attacks, with 374 organisations extorted and losses mounting.
Business leaders say burnout is a hard financial risk, urging employers to build mental health into job design, leadership and daily operations.
Many firms are missing exposed systems and credentials, leaving attackers an easier route in as breaches hit 43% of UK businesses last year.