Studies provide evidence on cyber threats, vulnerabilities, defensive controls, and user behavior, helping assess security risks and protections.
Search across headline titles and summaries.
Background for this topic.
Study in this tag covers systematic research, measurement, evaluation, or analysis of information-security technologies, threats, and practices. It may include experiments on attack techniques, assessments of defensive controls, surveys of security behavior, analysis of incidents, or research into vulnerabilities and privacy risks. The relevant question is usually what evidence the work provides, how broadly its findings apply, and whether its methods support reproducible conclusions.
For practitioners, studies can reveal exploitable conditions, estimate how often a weakness occurs, or test whether a control detects and contains attacks under realistic conditions. Interpret results cautiously when samples are small, environments are artificial, or a claimed vulnerability has not been independently validated. Research involving telemetry, users, or personal data also raises privacy and ethical requirements. Useful findings should translate into specific actions, such as prioritizing vulnerability remediation, changing configurations, improving detection logic, or revising secure-development and risk-assessment practices.
Weekly headline count for the current query.
Government organizations are targeted by attackers who know agencies cannot afford disruption to public services
Cobalt study finds 20-percentage-point drop in number of organizations relying solely on AI automation for testing
New ReliaQuest study reveals the six ways AI is practically being used in attacks today
SANS Institute study finds few SOCs have built AI into defined workflows, despite widespread adoption
ISSA study finds most security professionals feel challenged by colleagues’ involvement in cyber
A new Silobreaker and SANS Institute paper examines the ‘Intelligence-Stakeholder Gap’ and what organizations must do to achieve business buy-in on threat intelligence
ISC2 survey of cybersecurity professionals suggests that staff want their information security leaders to have experienced reacting to a significant cyber incident
Semperis study finds 74% of organizations believe AI will increase attacks on identity infrastructure
AI models are making rapid gains in vulnerability research and exploit development, raising new cybersecurity risks, a Forescout study finds
Attackers rapidly exploited a critical Oracle WebLogic RCE flaw the same day exploit code was released, according to a CloudSEK honeypot study
Teleport study reveals that organizations running over-privileged AI have a 76% incident rate
Despite the seemingly widespread adoption of AI for security operations, security leaders primarily use it for “relatively basic use cases,” said a Sumo Logic study
Bugcrowd study reveals 82% of security researchers now use AI, a big increase from 2023 figures
New IO study claims 88% of US and UK firms are concerned about state-sponsored cyber-attacks
An IANS study finds CISO compensation rose 6.7% on average in 2025 while budget growth halved compared to 2024
A new study has revealed 65% of top AI firms have leaked sensitive data on GitHub, risking $400bn in assets
A new study by Zimperium has revealed serious risks in free VPN apps, exposing users to privacy threats and security flaws
A new Cobalt study finds healthcare organizations among the slowest at resolving serious vulnerabilities
A new Checkmarx study reveals that AI-generated code now accounts for over 60% of codebases in some companies, much of which contains known vulnerabilities
Spikes in attacker activity precede the disclosure of vulnerabilities 80% of the time, according to a new GreyNoise report