74% of organizations cite coordinating vulnerability prioritization and remediation as their biggest security issue.

74% of IT and security professionals have experienced vulnerabilities in third-party applications.

65% of technology leaders invest in AI-powered observability to gain deeper, real-time insights into their digital ecosystems.

46% of middle market companies use AI performance monitoring.

51% of Americans aged 35 to 44 are concerned about deepfakes.

64.5% of activity on personal and free-tier AI accounts is business use rather than personal use.

The "Qix" campaign used 25 packages to compromise over 2.5 million downloads.

DrainDead portable EV battery siphoning rig was built for approximately €1,200 using a solar inverter and CCS adapter

Ultra-Fast Wireless Charging attack synchronises with the charger's signal within only three cycles, defeating frequency hopping countermeasures

Cobalt Strike accounted for 38.4% of all OST output (3,944 of 10,272 tracked OST instances), maintaining its position as the primary adversary framework.

Pwn2Own Automotive 2026 in Tokyo produced 76 unique zero-days and $1.047 million in payouts

160 Medium, 75 High, and 16 Critical automotive vulnerabilities identified in Q1 2026

Synacktiv chained an information leak with an out-of-bounds write to achieve a full win against Tesla infotainment via USB at Pwn2Own Automotive 2026

Most EVs in DrainDead testing allowed indefinite battery siphoning with repeated session resets; only some (e.g. Volkswagen group) halted discharging after around 60 seconds

Hands-on-keyboard intrusions against financial institutions spiked 43% globally and 48% in North America over the past two years.

Organizations with weak NHI management are 22% more likely to experience financial theft.

WhiteSnake Stealer was the most widely observed infostealer family, accounting for 31.6% of all tracked output, followed by RedLine at 23.9%, Rhadamanthys at 17.1%, and StealC at 6.9%.

Human element was present in 62% of breaches

206 unique automotive vulnerabilities identified in Q4 2025, a 19% increase over Q3 2025

56% worry they remain exposed to known vulnerabilities, even as 86% say remediation is a critical part of their security strategy.