Threat landscape analysis maps cyber risks, adversary methods, and exposed weaknesses to help assess security priorities and potential impact.
Search across headline titles and summaries.
Background for this topic.
The threat landscape is the changing set of cyber threats, adversaries, techniques, vulnerabilities, and exposed assets that may affect an organization or sector. It covers more than malware: phishing and credential theft, exploitation of internet-facing systems, abuse of cloud identities, supply-chain compromise, and disruptive or extortion-driven attacks can all be relevant. Its value lies in showing which threats are plausible for a particular environment, rather than treating every reported attack as equally important.
Security teams use threat intelligence to connect observed adversary activity with their own assets, technologies, and business processes. This supports vulnerability management by prioritizing flaws that are exposed or actively exploited, while attack-surface monitoring identifies unnecessary public services and privileged accounts. The landscape also guides detection engineering, control testing, and incident-response preparation: teams can decide which behaviors to monitor, which access paths to restrict, and which scenarios require rehearsed containment. Because threats and defensive conditions change, assessments should be refreshed as new vulnerabilities, techniques, and organizational dependencies emerge.
Weekly headline count for the current query.
Why CISOs Must Rethink Trust, MFA and Machine Identity GovernanceAI-driven phishing emails, voice deepfakes and synthetic identities have changed the threat landscape. Attackers now mimic trusted users with precision. Security teams can no longer rely on static controls or traditional verification methods.
Okta's Brett Winterford on Identity Threats and Agentic AI RisksAI is accelerating cyberattacks, collapsing timelines and exposing new identity risks. Okta's Brett Winterford explains how attackers are using AI to scale phishing, exploit credentials and infiltrate enterprises - and what CIOs must do to defend against this rapidly evolving threat landscape.
ENISA's de Vries on DDoS, Security Training and Road to Single Reporting PlatformEurope's cybersecurity posture is hardening, but the threat landscape is evolving faster, says Hans de Vries, chief cybersecurity and operations officer at ENISA. From supply chain disruptions to ransomware legislation, the pressure to build genuinely resilient societies has never been greater.
Francis deSouza of Google Cloud on Fighting AI-Driven Threats With AIAI has redrawn the threat landscape for security leaders and forced a new operating model. Francis deSouza of Google Cloud says CISOs must counter faster, AI-driven attacks with AI-led defense, stronger governance and teams fluent in AI.
Also: Leadership Decisions Shaping Cybersecurity in 2026Security leaders are heading into 2026 facing growing pressure from AI-driven risks, limited resources and an increasingly complex threat landscape. Sean Mack, who leads ISMG's CXO Advisor practice, joined ISMG editors to discuss how these forces are reshaping security.
Microsegmentation no longer remains a buzzword. In today's threat landscape, organizations are adopting it as a frontline defense against cyberattacks and higher cyber insurance premiums. About 90% of organizations are using some form of segmentation, according to Akamai's 2025 Segmentation Impact Study.
Live Hacking Event Offers New Insights Over Traditional TestingIn today's threat landscape, as attackers grow more sophisticated, organizations are finding that direct collaboration between ethical hackers and development teams offers advantages traditional testing methods can't always match.
Oslo University Hospital CSO Torkel Thune on Nordic Threat LandscapeTorkel Thune, head of the department for architecture, operational IT security and chief security officer at Oslo University Hospital, discusses how global shifts are affecting cybersecurity for the Nordic region, and how healthcare is especially vulnerable.
Experts Warn Funding Gaps Elevate Cyber RiskA breach of Columbia University’s IT systems after repeated attacks by U.S. President Donald Trump is highlighting how universities are unprepared for today’s threat landscape. Schools often leave campuses without enough resources for strong cyber defenses.
Insights on the Expanding Threat Landscape from AWS and DeloitteAs geopolitical tensions rise, companies face an expanding threat landscape - particularly through IoT and OT vulnerabilities that leave cloud infrastructures at risk, said PJ Hamlen at Amazon Web Services, and Julie Bernard at Deloitte & Touche LLP.
4-Day Cybersecurity Event Covers Emerging Tech, Latest CyberthreatsISMG Editors convened in San Francisco for coverage of RSAC Conference. Panelists shared an overview of opening-day speakers and hot topics, including the growth of AI, uncertainties in the global threat landscape, the Innovation Sandbox contest and Cryptographers' Panel session.
Navigating the Intersection of AI and Cybersecurity in an Era of Accelerating RiskAI is reshaping cybersecurity, emerging as both a powerful defense mechanism and a sophisticated tool for cyber adversaries. The Cybersecurity Implications of AI Pulse Report 2025 provides an in-depth analysis of how AI is transforming the digital threat landscape.
Semperis CEO Mickey Bresman: AD’s Technical Debt Makes It a Prime Cyber TargetFrom weak service account passwords to sync gaps with cloud platforms, Active Directory’s age is showing. Semperis CEO Mickey Bresman says organizations still underestimate how central AD is to their threat landscape - and the difficulty of fixing what’s been built over decades.
Also: Leadership Choices That Could Reshape Cybersecurity Priorities, BudgetsThe Trump administration has inherited a strong cybersecurity framework but faces potential roadblocks from budget cuts and a shifting threat landscape. Jeremy Grant, managing director at Venable LLP joined ISMG editors to discuss the critical issues facing security leaders during the transition.
Financial Services Experts Call for Stronger Focus on Third-Party Risk ManagementFinancial services leaders and cybersecurity experts said at Information Security Media Group’s 2024 Financial Services Summit that third-party vendor security risks required the need for proactive, multi-layered security frameworks to combat the growing threat landscape.
New CEO Manny Rivelo Focuses on Security, Acquisitions to Empower MSPs, SMBsNew ConnectWise CEO Manny Rivelo is prioritizing security and new acquisitions, aiming to provide MSPs with a streamlined, multi-tenant platform. His vision offers an integrated approach to securing SMBs amid a dynamic threat landscape with capabilities like backup, MDR and managed SIEM.
Findings From the Tech Giant's Defense Report 2024 Flag Expanding Threat LandscapeMicrosoft's latest Digital Defense Report exposed an increasingly complex cyber battlefield in which nation-state actors team up with cybercriminals to launch sophisticated attacks, while organizations continue to struggle to defend against these evolving threats.
ISC2's Tara Wisniewski on Gathering Emotional Intelligence, Building Out Job SkillsWith 75% of cybersecurity leaders facing the worst threat landscape they've seen and 90% reporting workforce shortages, emotional intelligence has become crucial for effective leadership and team retention, said Tara Wisniewski, EVP of advocacy, global markets and member engagement at ISC2.
ENISA's Ifigeneia Lella Shares Highlights of 2024 Threat Landscape ReportWhile the number of ransomware attacks stayed about the same in the past year, cybercriminals are using more effective tactics such as weaponizing breach disclosure deadlines to extract higher ransoms, according to ENISA's 2024 Threat Landscape report.
Commerce Department Moves to Regulate Foreign Vehicle Tech Amid Security FearsThe White House is proposing new regulations on connected vehicles that would prohibit manufacturers from importing software or hardware from the People’s Republic of China and Russia, citing an ever-increasing threat landscape and heightened national security risks.