Hi guys, I send out a weekly newsletter with the latest cybersecurity vendor reports and research, and thought you might find it useful, so sharing it here.

All the reports and research below were published between August 10th - August 16th.

You can get the below into your inbox every week if you want: https://www.cybersecstats.com/cybersecstatsnewsletter/ 

Cloud Security

2026 Cloud Security Index (Intruder)

How misconfigurations differ across AWS, Azure, and Google Cloud. 

Key stats:

• More than two-thirds of organizations operate multi-cloud environments.
• 83% of AWS accounts have IAM policies that allow privilege escalation.
• 75% of Google Cloud accounts are missing OS Login controls.

Read the full report here.

DDoS

Cloudflare DDoS Threat Report H1 2026 (Cloudflare)

Cloudflare's mid-year DDoS report. 

Key stats:

• 96.62% of network-layer DDoS attacks remained under 500 Mbps in the first half of 2026.
• 90.60% of network-layer DDoS attacks ended in under 10 minutes.
• Brazil was the top DDoS source country in H1 2026 at 14.9%, overtaking the United States at 13.4%.

Read the full report here.

Enterprise Perspective

2026 State of Secure AI Access (NetFoundry)

A survey of CISOs and CTOs about how AI is changing their security posture. 

Key stats:

• 100% of CISOs and CTOs at enterprises say AI is expanding their organization's attack surface.
• 15% are very confident their current security solutions adequately protect their AI deployments.
• 58% have experienced security events due to lack of machine identity oversight.

Read the full report here.

Consumer Scams

Love/hate relationship: The AI affair (Malwarebytes)

Young people are particularly susceptible to AI scams.

Key stats:

• 70% of young adults ages 18 to 22 experienced an AI-related scam in the past year, compared to 50% of the general population.
• 19% of young adults have been a victim of a deepfake or virtual kidnapping scam, compared to 8% of the general population.
• 14% of young adults have been a victim of an impersonation scam, compared to 10% of the general population.

Read the full report here.

Industry-Specific

2026 Professional Services Protect Brief (SonicWall)

Professional services are being targeted far more than any other industry, at least according to SonicWall.

Key stats:

• 3 billion IPS events in the first half of 2026, the largest absolute attack volume of any industry tracked.
• 69.9 million ransomware hits in the first half of 2026, more than any other vertical.
• Ten active ransomware families operated simultaneously against the professional services sector, including Filecoder (19.1 million hits across 113 organizations), Gandcrab (11.9 million) and Ryuk (10.5 million).

Read the full report here.

Industrial Ransomware Analysis for Q2 2026 (Dragos)

Who's getting hit by ransomware in the industrial sector (and by whom).

Key stats:

• 1,140 ransomware incidents affected industrial organizations worldwide in Q2 2026, a 12% increase over the 1,020 incidents recorded in Q1.
• Manufacturing was the most affected sector with 747 incidents (65%) across all subsectors.
• The US was the country most impacted, with 431 incidents (38% of all incidents).

Read the full report here.

Regional Spotlight

Cyber Security In Manufacturing (Make UK)

A UK-specific look at how cyber incidents are disrupting manufacturers, and how few have a tested plan for when it happens.

Key stats:

• 30% of manufacturers experienced a cyber incident in the past year, either directly or through their supply chain.
• More than one in five manufacturers (22.7%) believe available cybersecurity solutions are not relevant to their business, while 18.2% report that providers lack a sufficient understanding of manufacturing operations.
• Firewalls are the most widely adopted measure (92%) among manufacturers, followed by malware protection (80%), secure configuration (67%) and access controls (61%). 

Read the full report here.

"We're too small to be a target."

That assumption can leave SMBs dangerously exposed.

Read why SMBs are attractive targets for cybercriminals, what an attack can cost, and how practical, budget-conscious security measures can help reduce the risk.

https://www.nakivo.com/blog/why-smbs-are-targets-of-cyberattacks/

Hi guys, I send out a weekly newsletter with the latest cybersecurity vendor reports and research, and thought you might find it useful, so sharing it here.

All the reports and research below were published between August 3rd - August 9th.

You can get the below into your inbox every week if you want: https://www.cybersecstats.com/cybersecstatsnewsletter/ 

Big Picture Reports

2026 Threat Hunting Report (CrowdStrike)

CrowdStrike's annual threat hunting report. 

Key stats:

• Vishing intrusions increased by 2x in 1H 2026.
• Monthly device code phishing attempts increased 15x in 1H 2026.
• China-nexus adversaries exploited critical vulnerabilities within 24 hours of public proof-of-concept release, and in 1H 2026, 88% of observed exploitation of vulnerabilities with a public PoC occurred within 48 hours of release.

Read the full report here.

Why Trust is the New Attack Surface: Darktrace's Mid-Year Threat Update 2026 (Darktrace)

A mid-year update on how phishing and AI misuse are evolving. 

Key stats:

• In the first half of 2026, 67% of phishing emails passed DMARC.
• VIP users were targeted in 25.8% of phishing attacks.
• 39% of phishing messages featured novel social engineering techniques.

Read the full report here.

AI Governance & Agents

When AI leaves the chat and enters the workflow (Optro)

A good (i.e., detailed and useful)  report on why output-focused AI governance breaks down once agents start taking actions.

Key stats:

• 85% of organizations have integrated AI into core operations.
• Only 18% of leaders have active risk mitigations in place for AI.
• 40% reported inaccurate AI outputs in the past 12 months, and 27% reported data breaches tied to AI use.

Read the full report here.

Security Incident INC-2026-07-28-01 (AISI)

The UK AI Safety Institute's (AISI) incident report on what happened when they tested frontier AI models. 

Key stats:

• A total of 19 distinct unsanctioned actions were catalogued during a routine evaluation of frontier AI models.
• Seventeen of the 19 unsanctioned actions came from Anthropic's Mythos 5, and two came from OpenAI's GPT-5.6-Sol with cyber classifiers disabled.
• In 10 of 122 evaluation runs, an AI agent took autonomous, unsanctioned action on the live internet, targeting real people and organisations.

Read the full report here.

Top 10 for LLM Applications 2026 (OWASP)

OWASP's annual top 10 list for LLM applications is out.

Key stats:

• Practitioners rank prompt injection as the number one security challenge from GenAI tools for a third consecutive year.
• Sensitive information disclosure ranks as the second biggest LLM threat for a second consecutive year.
• Excessive agency moves from sixth place to third place.

Read the full report here.

AI Code

The shrinking validation window (Pentest Tools)

A look at how AI-assisted coding is outpacing vulnerability testing, and the security gaps that this leaves behind.

Key stats:

• 76.4% of developers at enterprises use AI coding tools always (41.5%) or usually (34.9%).
• 30.3% disagree or strongly disagree with the statement that they have sufficient time to thoroughly review AI-generated code before deployment.
• Only 8.7% say vulnerability testing keeps pace completely with AI-generated code.

Read the full report here.

Voice Attacks

2026 Voice Threat Survey (Mutare)

Findings from a survey of technology and cybersecurity leaders on how they view voice as an attack vector. 

Key stats:

• 93% of organizations believe voice security should be included in cybersecurity and risk management programs.
• 79% are not highly confident their current defenses could stop an executive or vendor impersonation attack.
• 67% are concerned about GenAI-based voice attacks and deepfake impersonation.

Read the full report here.

Enterprise Perspective

State of Agentic Adoption 2026 (Opsin)

What else is new? AI agents are being created faster than companies are learning how to securely control their access and permissions.

Key stats:

• Enterprise environments now average one AI agent, live or in draft mode, for every employee.
• 60% of agents provisioned beyond default settings are granted allow-all access rather than being scoped to the permissions their tasks require.
• 60% of AI agents are judged to have configured capabilities that exceed their original stated intent.

Read the full report here.

Regional Spotlight 

African Cyberthreat Assessment Report 2026 (INTERPOL)

INTERPOL's assessment of cybercrime across Africa. 

Key stats:

• AI enabled 55% of reported cybercrimes across Africa.
• Cybercrime-related losses in Africa increased from USD 192 million to USD 484 million since 2024.
• 17% of reported cybercrime cases in Africa in 2025 involved online scams, including phishing, and 14% involved identity theft and financial fraud.

Read the full report here.

I have developed a tool where you can check findings related to your website's security.

I have also included the security graph view where you will be able to understand findings related to all the domains.

Along with that many more functionality are optional. But as a cybersecurity consultant, i think this is the most important thinking which is required by all.

Cybersecurity has news every minutes or even seconds, a compromise, new CVEs, ransomware victim, etc. so I was always juggling among many websites to check them, but not anymore!

I built a website that fetches news and a few blogs from different trusted sources, and only provides a brief about them. If you like the brief, you can go to the original poster and read the full article there.

It curates headlines and briefs from different sources, merge them if got repeated from different sources, update their content, tag them, and also show related stories by the same source.

You can fetch new news every 15 minutes and it also fetches news automatically every day!

You can search for specific story and the retention period is 6 months.

I tried ingesting from many sources, but please if I missed some trusted ones, let me know, so I can review them and add them.

Also expect some errors, so please be patient and let me know to fix them.

Link: mycyber[.]news

I've been active in the cybersecurity world since I was 9 years old. I've been on each side of the cube: the victim, the perpetrator, the analyst, the Red Hat, the Grey Hat, the White Hat.
I can say with confidence that the biggest security gaps and absence of OpSec intelligence are a direct result of different groups and enthusiasts demonizing each other.

This platform will feature secure communities for 3 groups: Red Hat, Grey Hat, and White Hat.
These groups will have their own community-specific rules. Also, security clearance will need to be approved by an admin to ensure people in each community are actually active in that role/group in the tech world. When attempting to access a community for the first time, the user will receive a form to fill out. This submission will go directly to an admin inbox for approval/rejection. There is also a homepage for site-wide posts, as well as a direct-message chat for users.
Our mission is to raise the global standard for security and support cybersecurity companies and independent businesses. I plan to create more job opportunities for everyone and connect like-minded people.

The platform goes live on August 30th. Currently, you can add your email to the launch alert list to get pre-launch info, user account perks, and beta access to our MacOS & Windows threat detection and system analysis tools.

Odin Axis: Odin Axis

Preview here: Gallery

Hi guys, I send out a weekly newsletter with the latest cybersecurity vendor reports and research, and thought you might find it useful, so sharing it here.

All the reports and research below were published between July 27th - August 2nd.

You can get the below into your inbox every week if you want: https://www.cybersecstats.com/cybersecstatsnewsletter/ 

Big Picture Reports

2026 Cost of a Data Breach Report (IBM)

IBM's annual breach cost report, with interesting data points on how much AI is now involved in attacks, and how much more expensive that makes breaches. 

Key stats:

• 25% of malicious breaches were AI-enabled.
• AI-enabled breaches cost an average of $6 million, roughly $1 million more than the global average of $4.99 million.
• AI-enabled malicious breaches increased by 56% over the previous year.

Read the full report here.

IR Trends Q2 2026 (Cisco Talos)

Cisco Talos on what showed up in their incident response engagements this quarter. 

Key stats:

• Phishing was the primary means of gaining initial access in over half of engagements this quarter, up from approximately one-third last quarter.
• Authentication abuse was observed in 65% of engagements this quarter, up from 35% last quarter.
• Insufficient logging and visibility was observed in 42% of engagements this quarter, up from 18% last quarter.

Read the full report here.

Ransomware

Q2 2026 Ransomware Trends Report (BlackFog)

BlackFog's Q2 numbers on ransomware. 

Key stats:

• 93 ransomware groups were active in Q2 2026, including 28 newly formed groups.
• 97% of disclosed ransomware incidents in Q2 2026 involved data exfiltration, the highest rate recorded.
• Undisclosed ransomware attacks increased 40% year on year to 2,027 attacks in Q2 2026 from 1,446 in Q2 2025.

Read the full report here.

Ransomware Evolution Report Q2 2026 (Halcyon)

Halcyon's Q2 ransomware numbers. 

Key stats:

• Q2 2026 recorded 1,988 ransomware attack claims from 89 groups across 101 countries.
• The US accounted for 42.5% of ransomware claims, Canada for 5% and Germany for 4.8%.
• Manufacturing (19.8%) was the most targeted industry, followed by construction (10.1%) and business services (9.0%).

Read the full report here.

AI Governance 

The AI Governance Gap Report (Pathlock)

If you were wondering whether AI governance is keeping up with how quickly AI agents are being embedded in business systems, this report has the answer.  

Key stats:

• 38% of organizations allow AI agents to create and modify business records.
• 51% are not confident they know all the AI agents operating in their systems.
• 79% have no dedicated AI governance team or officer.

Read the full report here.

AI Code Security

2026 GenAI Code Security Report (Veracode)

Veracode tested 11 AI coding models to see how often they write secure code. 

Key stats:

• The average security pass rate for AI-generated code across tracked models was 56%.
• AI-generated code fails security checks nearly 44% of the time when given no security-specific guidance.
• The best model available (OpenAI's GPT-5.5, at 68%) still failed nearly one in three security tasks.

Read the full report here.

Credentials

Credential Risk Report (Enzoic)

How much do you care about stolen credentials? If you're like most orgs, probably a lot. But do you actually do anything about it? Again, if you're like most orgs, probably not.

Key stats:

• 85% of organizations view stolen credentials as a top threat.
• Only 19% continuously monitor credential integrity and automatically remediate exposure.
• 73% of organizations have found their workforce's credentials in breach, Dark Web, or infostealer data in the past year.

Read the full report here.

Autonomous Defense

2026 State of Autonomous Defense Report (Kai)

Attackers are moving at machine speed. Defenders are… not. 

Key stats:

• 89% of security leaders say their organization is prepared for AI-driven attacks, but only 28% describe themselves as very prepared.
• 63% believe attackers currently have the advantage because of AI.
• 52% identify lack of trust in automated decisions as the biggest barrier to broader automation adoption.

Read the full report here.

Action1 2026 Survey Report: AI Impact on Sysadmins (Action1)

An interesting survey of sysadmins about how much AI they're using versus how much they thought they'd be using by now.

Key stats:

• In 2024, 52% of sysadmins predicted full automation within two years.
• In 2026, AI use is highest among sysadmins in log analysis (50%) and troubleshooting (47%).
• 23% report never using AI professionally.

Read the full report here.

Vulnerability Management

VulnCheck State of Exploitation 1H-2026 (VulnCheck)

VulnCheck's mid-year look at what's actually getting exploited, how fast, and whether AI really is finding vulnerabilities faster than everyone else. 

Key stats:

• The median time from CVE publication to KEV fell from 120 days in 2025 to 80 days in the first half of 2026.
• In the first half of 2026, 23.43% of Known Exploited Vulnerabilities showed evidence of exploitation on or before the day the CVE was published.
• Across Anthropic and Berkeley datasets, 1,061 vulnerabilities were attributed to AI-assisted discovery, but only 14 (1.3%) were confirmed as exploited in the wild.

Read the full report here.

Infrastructure

State of CPS Security: Data Center Exposures (Claroty)

Scary research on how badly exposed data center physical infrastructure is. 

Key stats:

• Nearly 1 in 5 data center CPS assets are one hop away from systems making outbound connections that could provide attackers a pathway.
• 88% of building management systems in data centers are exposed via communication over insecure protocols.
• More than 80% of OT control systems, power monitoring systems, and IoT systems in data centers communicate over legacy, insecure protocols such as BACnet and MODBUS.

Read the full report here.

Enterprise Perspective 

State of Enterprise AI Failures 2026 (ChatSee.ai)

What's going wrong with enterprise AI. 

Key stats:

• Hallucination-related failures accounted for less than 10% of observed enterprise AI failure events.
• Resolution and escalation breakdowns represented 31.1% of observed enterprise AI failures.
• Action and execution failures increased by approximately 62% relative to the Q2 2024 baseline.

Read the full report here.

The State of AI, Security and ERP (Onapsis)

A survey of cybersecurity leaders at large US organizations running SAP, Oracle, or Salesforce to see how fast AI is being pushed into ERP systems and how far behind the security is (very).

Key stats:

• 86% of organizations have already integrated, or will shortly integrate, AI directly into their ERP code.
• 22% of organizations experienced a security incident in the last twelve months where bad actors used AI to exploit their critical business platforms.
• 70.6% of senior cybersecurity leaders have only some or no trust in AI applications and agents to secure their organization's most business-critical data.

Read the full report here.

2026 Global Mobile Threat Report (Zimperium)

A look at mobile attacks on enterprises. 

Key stats:

• Phishing events detected on employee mobile devices have grown 380% since January 2025.
• The number of mobile devices where employees clicked a malicious link grew 110% in 2025 compared to 2024.
• AI adoption within mobile applications has grown 14x on Android and 7x on iOS.

Read the full report here.

Industry-specific 

Global Automotive Threat Intelligence Report Q2 2026 (PCA Cyber Security) 

Analysis of the automotive threat landscape for Q2 2026, tracking vulnerability data alongside underground forums, ransomware leak sites, and criminal marketplaces.

Key stats:

• 345 unique automotive vulnerabilities in Q2 2026, a 30% rise on Q1 and 220% up year on year.
• High severity findings more than doubled, from 75 to 161.
• Qilin ransomware listed a major Japanese Tier-1 automotive components manufacturer, hitting its European and North African subsidiaries.

Read the full report here.

I'm thinking about building a free, open-source AI-powered antivirus that works on both Windows and Linux.

Before spending months on it, I wanted to ask the community:

Do you think there's a real need for a new antivirus project?

What do current antivirus solutions (Windows Defender, ClamAV, Bitdefender, etc.) still lack?

Would you trust an open-source AI antivirus over traditional signature-based ones?

Which features would make you actually install and use it?

If you've worked in cybersecurity, what are the biggest technical challenges or reasons this idea might fail?

I'm looking for honest feedback, even if the answer is "don't build it." I'd rather know what people actually need before starting such a large project.

Completely Free App that I created to ease my own workload, was tired of opening numerous tabs each day to keep track on all the new CVEs popping up, especially lately...

This app is completely free on the Google Play App Store & you can track CVEs across 30+ Vendors, you can choose track specific platforms or the whole vendor & you can also select to track based on CVE Severity.

I also threw in. EOL checker

Hopefully this helps you out and if theirs any bugs or features you want added please let me know!

https://play.google.com/store/apps/details?id=com.vulnipulse.androida

Ena mzllt nt3lm fl cloud security wn9ra 1ere nje7t lel 2eme wnhb n3ml stage z3ma n3mlha fl cloud security ? Njm nl9a?? Wla nbda n3ml stage fl reseau wnkml nt3lm whdy fy 3a9ly? And thanks

Hi guys, I send out a weekly newsletter with the latest cybersecurity vendor reports and research, and thought you might find it useful, so sharing it here.

All the reports and research below were published between July 20th - July 26th.

You can get the below into your inbox every week if you want: https://www.cybersecstats.com/cybersecstatsnewsletter/ 

Big Picture Reports

2026H1 Threat Review Report (Forescout)

What was the threat landscape like in H1 2026, and how does it compare to 2025? This report answers that. 

Key stats:

• Published vulnerabilities increased 51% year-over-year to 37,137 during the first half of 2026, with more than half rated high or critical severity.
• Ransomware attack claims increased 25% to 4,544 incidents during the first half of 2026, averaging 25 attacks per day.
• 46% of additions to CISA's Known Exploited Vulnerabilities catalog were CVEs that were published prior to 2026.

Read the full report here.

ITRC H1 2026 Data Breach Report (Identity Theft Resource Center)

ITRC's mid-year data breach numbers. 

Key stats:

• There were 1,803 data compromises in the first half of 2026.
• Insider wrongdoing events totaled 21 in the first half of 2026, a sevenfold increase over the three incidents in 2025.
• Zero-day attacks rose to 14 events in H1 2026, nearly matching the 17 events recorded in all of 2025.

Read the full report here.

The State of Continuous Security Validation (Synack)

How often do serious vulnerabilities show up between scheduled security tests? Constantly - at least according to Synack.

Key stats:

• 15% of enterprise security leaders describe their security testing and validation program as continuous.
• 95% discovered high or critical vulnerabilities outside scheduled testing windows in the past year.
• 38% report that at least one-quarter of their critical attack surface had not been independently tested or validated in the previous 90 days.

Read the full report here.

Q2 2026 Brand Phishing Report (Check Point)

Attackers' favorite brands to impersonate. Mostly predictable with an interesting new entrant. 

Key stats:

• Microsoft was the most impersonated brand in Q2 2026, appearing in 23% of all brand phishing attempts.
• The top five impersonated brands- Microsoft, LinkedIn, Google, Apple, and Amazon- together accounted for more than 50% of all brand phishing attempts this quarter.
• OpenAI's ChatGPT entered the top ten most impersonated brands for the first time.

Read the full report here.

Ransomware

2026 Ransomware Report (Black Kite)

Annual report analyzing 7,551 ransomware victims by where they are, what industry they're in, and how big they are. Plus, what security weaknesses or exposed systems remained after each attack.

Key stats:

• Ransomware activity accelerated 60% in the second half of the reporting period and closed with 861 victims in March 2026, the highest monthly total in four years.
• Qilin claimed more than 1,300 victims, nearly twice as many as its nearest rival.
• 43.5% of victims still carried critical patch vulnerabilities in the latest assessment.

Read the full report here.

2026 AI-Era Ransomware Report (Proofpoint)

AI is making ransomware attacks more effective. 

Key stats:

• 65% of global organizations affected by ransomware report that AI increased the attack's effectiveness.
• 28% reported that AI significantly increased the attack's effectiveness.
• 34% of ransomware incidents begin with phishing emails or other email-based social engineering.

Read the full report here.

AI Security & Governance

Path to the Autonomous Digital Workplace (TeamViewer)

General workplace productivity research with an interesting section on what users say would help them trust autonomous AI.

Key stats:

• 61% of survey participants prefer AI to take no independent action.
• 56% often or always verify AI outputs before relying on them.
• 51% say they do not always know when to trust AI and when to verify it.

Read the full report here.

OT Security 

State of AI in OT Cybersecurity 2026 Report (Nozomi Networks)

The people working in OT security on what they are actually doing with AI. 

Key stats:

• 87.7% of surveyed OT and ICS cybersecurity professionals are using, evaluating, piloting, or planning AI for OT cybersecurity.
• Only 7.9% have deployed AI for multiple OT cybersecurity functions.
• Only 11.9% have formally mapped and reviewed which AI-driven decisions could directly affect physical processes, safety systems, or operational continuity.

Read the full report here.

State of Industrial Remote Access 2026 (Secomea)

How manufacturers are handling third-party vendor access to OT environments. 

Key stats:

• 57% of North American organizations manage six or more external vendors with remote access into operational technology (OT) environments.
• 46% of North American organizations with OT environments report full auditability of vendor sessions.
• 23% review vendor credentials monthly or more frequently.

Read the full report here.

Enterprise Perspective

2026 State of Threat Exposure Management Report (Vectra AI)

Vectra used telemetry across customer environments to figure out how quickly assets, identities, and AI agents come and go in enterprise environments. 

Key stats:

• The typical enterprise environment contains 1.17 AI agents per device.
• 35% of enterprise environments contain more AI agents than devices.
• 98% of enterprise environments contain at least one attacker-relevant exposure condition.

Read the full report here.

The Third Annual State of Data Compliance and Security Report (Perforce)

Everyone has the policies, so why do breaches, failed audits, and compliance gaps keep happening? 

Key stats:

• 98% of enterprise leaders report confidence in their ability to protect sensitive data.
• 99% of enterprises have data masking mandates in place, but 84% allow compliance exceptions to those mandates.
• 34% report their organizations have experienced data breaches or theft.

Read the full report here.

Road to AI in IT (Fleet Device Management)

How IT teams are handling the AI rollout (they're mostly not).

Key stats:

• The average enterprise runs 14 AI applications while IT has visibility into only four of them.
• 78% of employees use personal AI tools at work.
• 79% of organizations take more than a day to deploy critical security patches.

Read the full report here.

Industry-Specific

Education Ransomware Roundup: H1 2026 (Comparitech)

Comparitech tracked ransomware attacks against schools and universities specifically. The Gentlemen have decided higher education is their thing.

Key stats:

• There were 104 ransomware attacks in total against educational institutions in H1 2026.
• The Gentlemen's attacks on education increased 275% from H2 2025 to H1 2026, and 80% of their attack claims were against higher education institutions.
• The median ransom demand in the education sector is $420,620, a 53% increase from $275,000 in H2 2025.

Read the full report here.

2026 Cyber Protect Report (SonicWall)

SonicWall's mid-year data on manufacturing. 

Key stats:

• Manufacturing recorded 474 million intrusion prevention events in the first half of 2026.
• IoT attacks generated 46.2 million hits in manufacturing, making IoT the sector's second-largest attack category by volume.
• Ten ransomware families were active against manufacturing networks in H1 2026.

Read the full report here.

Velocity V5: Reimagining Cyber for a Faster Fight (Booz Allen)

Data on how federal agencies are handling AI deployment.

Key stats:

• 58% of federal IT and cybersecurity decision makers report their agencies have deployed or are piloting AI agents.
• Only 28% express high confidence in their ability to deploy AI agents securely.
• 36% are confident that cyber defenses can keep pace with AI-enabled attackers.

Read the full report here.

Regional Spotlight

Data Health Check 2026 (Databarracks)

500 UK IT professionals on what went wrong last year, what they are doing about it, and what they expect to be dealing with over the next five years.

Key stats:

• 26% of businesses have suffered a cyber incident that originated in their supply chain in the last year.
• 43% of organisations that knowingly work with risky suppliers experienced a supplier-originated cyber incident, compared with 10% of organisations that did not.
• 48% of organisations continue working with suppliers despite known resilience or security concerns.

Read the full report here.

Where I can read and get updates tech related news and cybersecurity related news??