Latest cybersecurity reporting from selected sources.

Checkmarx report warns that business pressure is among the reason security leaders let security compliance slip

Google Cloud report details a sharp rise in attackers exploiting software vulnerabilities, including React2Shell

Datadog report reveals two-fifths of services are affected by exploitable bugs

Hacktivists and cybercriminals have intensified their efforts to exploit vulnerabilities in industrial systems, according to a Cyble report

Spikes in attacker activity precede the disclosure of vulnerabilities 80% of the time, according to a new GreyNoise report

Google’s Project Zero team will provide limited details of new vulnerabilities early following discovery, in a bid to speed up end users’ patching

50% of mobile devices run outdated operating systems, increasing vulnerability to cyber-attacks, according to the latest report from Zimperium

After a 180% rise in last year’s report, the exploitation of vulnerabilities continues to grow, now accounting for 20% of all breaches

Mandiant’s M-Trends report found that credential theft rose significantly in 2024, driven by the growing use of infostealers

Surging machine identities, faster threat detection and fewer vulnerabilities are shaping cloud security according to a new report

Four in ten flaws exploited by threat actors in 2024 were from 2020 or earlier, with some dating back to the 1990s, according to a GreyNoise report

AI-related API vulnerabilities surged 1,205% in 2024, with 99% tied to API flaws, according to a new report by Wallarm

45% of security breaches in the energy sector in the past year were third-party related, according to a report by Security Scorecard and KPMG

A new report by Red Canary has found that while cybersecurity budgets have risen, many security leaders still feel overwhelmed by the growing threat landscape

A Black Kite report found that 67% of manufacturing firms have at least one vulnerability from CISA’s Known Exploited Vulnerabilities (KEV) catalog

A new report by Check Point Software highlights a significant increase in cloud security incidents, largely due to a lack of cybersecurity expertise and employee training

In a new report, WithSecure found that higher severity vulnerabilities in edge services and infrastructure devices are rising fast

A new Forescout report found that IoT devices containing vulnerabilities surged 136% compared to a year ago, becoming a key focus for attackers

A new report by Cato Networks found that exploiting old vulnerabilities in unpatched systems is one of threat actors’ favorite initial access vectors

Mandiant’s latest M-Trends report found that vulnerability exploitation was the most common initial infection vector in 2023, making up 38% of intrusions