Geek-Guy.com

Tag: report

Federal audit reveals NIST’s NVD is plagued by poor planning and duplication

A Department of Commerce inspector general report released Thursday found that the National Institute of Standards and Technology has mismanaged a critical cybersecurity vulnerability database through poor planning, inefficient operations, duplicate federal programs, and failure to communicate with users. The National Vulnerability Database, maintained by NIST since 2005, collects information about computer security flaws and…

Browser Threats Expand Across Enterprise Networks 

A NordLayer report warns that browsers have become the primary workplace interface, increasing exposure to credential theft, phishing, malware, and session hijacking attacks.   The study found that 100% of the 504 analyzed workplace applications supported browser access, while 78.8% were entirely browser-based. According to the report, browser-related incidents are now widespread across organizations.  The report…

$11 billion reasons Apple’s App Store tax is worth paying

Apple publishes its App Store fraud prevention report every year,. And when it does, the company presses the point that its curated system brings much value to developers and customers, including highly effective protection against fraud. It says it prevented more than $2.2 billion in potentially fraudulent transactions in 2025 alone. A tax worth paying The company said…

New AI Usage Report: Enterprise AI Risk Is Heavily Concentrated Among a Small Group of AI “Power users”

State of AI Usage Report 2026 (full report here) by LayerX Security reveals the extent of the enterprise AI visibility gap and why most organizations still don’t understand where their AI exposure is actually coming from. The research shows that enterprise AI risk is not distributed evenly across users or platforms. Instead, it is heavily…

2026 Verizon DBIR: The New Era of Cyber Threats 

The 2026 Verizon Data Breach Investigations Report (DBIR) paints a clearer picture of today’s cybersecurity landscape: attackers are moving faster, artificial intelligence is accelerating cybercrime, and organizations continue to struggle with foundational security practices.  Key Takeaways from the 2026 Verizon DBIR Report Vulnerability exploitation (31%) overtook credential abuse (13%) as the top initial access vector…

CISA mulls new three-day remediation deadline for critical flaws

Experts have mixed reactions to a report that the US Cybersecurity and Infrastructure Security Agency (CISA) is considering reducing the timeline in which government agencies must address critical vulnerabilities from two weeks to only three days. The current 14-day window applies to high-severity flaws dating from 2021 onwards, listed as known to be under exploit…

JumpCloud Report Finds AI Agent Security Gaps Widening

JumpCloud, the IT management platform company, released its Agentic IAM Pulse Report on Tuesday, drawing on responses from 261 IT, security, and identity decision-makers at organizations with 200-2,500 employees across the United States and the United Kingdom.  The findings reveal a widening gap between how aggressively companies are deploying AI agents and how little governance…

Guardz Warns MSPs of Cloud Ransomware and BEC Risks

Today, cybersecurity firm Guardz released its 2026 State of MSP Threat Report, a deep dive into how Artificial Intelligence and identity-first attacks have completely flipped the script for MSPs and the small businesses they protect.  The report reveals that AI has officially killed the obvious phishing email. Gone are the days of spotting a scam…

Report: AI Shifts IT Roles as Demands and Complexity Rise

SolarWinds recently released its 2026 IT Trends Report: The Human Side of Autonomous IT, examining how AI is reshaping IT roles. Instead of simply managing systems, IT teams are now expected to interpret AI-driven insights, design automated workflows, and govern increasingly autonomous environments. The shift is creating a paradox: while AI reduces manual effort, it…

5 trends defining the future of AI-powered cybersecurity

The new N-able and Futurum Report reveals how AI is reshaping cyber resilience as it accelerates both business innovation and adversarial tradecraft. Attackers are scaling their operations with unprecedented speed, leveraging automation to bypass traditional defenses. For IT security leaders and MSP owners, the days of relying on static, perimeter-based security are over. To stay…

Here’s how cyber heavyweights in the US and UK are dealing with Claude Mythos

A joint report from the Cloud Security Alliance (CSA), the SANS Institute and the Open Worldwide Application Security Project (OWASP) concludes that in the near term, organizations are “likely to be overwhelmed” by threat actors using AI to find and exploit vulnerabilities faster than defenders can patch them. While those organizations can use AI tools…

The State of AI Risk Management in 2026 Reveals a Growing Confidence Gap

As enterprise adoption of artificial intelligence accelerates, a new report warns that organizations may be far less prepared to manage AI risk than they believe.  The State of AI Risk Management 2026 report from the Purple Book Community highlights a widening disconnect between perceived control and operational reality, exposing critical gaps in how companies govern…

The State of Trusted Open Source Report

In December 2025, we shared the first-ever The State of Trusted Open Source report, featuring insights from our product data and customer base on open source consumption across our catalog of container image projects, versions, images, language libraries, and builds. These insights shed light on what teams pull, deploy, and maintain day to day, alongside the vulnerabilities and

GNM has published its 2025 Annual Infrastructure Report

GNM has published its 2025 Annual Infrastructure Report, outlining a year of coordinated backbone expansion, IX ecosystem growth and high-capacity platform scaling across Europe and Singapore. In 2025, the focus was not on isolated upgrades, but on strengthening the platform as one interconnection environment – where transport, peering and IP services develop on a unified…

TeamPCP Supply Chain Campaign: Update 001 ? Checkmarx Scope Wider Than Reported, CISA KEV Entry, and Detection Tools Available, (Thu, Mar 26th)

This is the first update to the TeamPCP supply chain campaign threat intelligence report, “When the Security Scanner Became the Weapon” (v3.0, March 25, 2026). That report covers the full campaign from the February 28 initial access through the March 24 LiteLLM PyPI compromise. This update covers developments since publication. Checkmarx ast-github-action: All 91 Tags…

LexisNexis® Risk Solutions’ latest Cybercrime Report reveals key global fraud trends emerging over the past year. Derived from analysis of more than 116 billion online transactions detected through our LexisNexis® Digital Identity Network® in 2025, t

 LexisNexis® Risk Solutions’ latest Cybercrime Report reveals key global fraud trends emerging over the past year. Derived from analysis of more than 116 billion online transactions detected through our LexisNexis® Digital Identity Network® in 2025, the report shows a significant 8% rise in global fraud rates driven by attacks targeting the gaming and gambling and ecommerce sectors, cost of living pressures and new emerging fraud tactics.

LexisNexis® Risk Solutions’ latest Cybercrime Report reveals key global fraud trends emerging over the past year. Derived from analysis of more than 116 billion online transactions detected through our LexisNexis® Digital Identity Network® in 2025, t

 LexisNexis® Risk Solutions’ latest Cybercrime Report reveals key global fraud trends emerging over the past year. Derived from analysis of more than 116 billion online transactions detected through our LexisNexis® Digital Identity Network® in 2025, the report shows a significant 8% rise in global fraud rates driven by attacks targeting the gaming and gambling and ecommerce sectors, cost of living pressures and new emerging fraud tactics.

Auvik: Shadow IT, AI Gaps Challenge IT Teams in 2026

Auvik’s 2026 IT Trends Report finds a growing disconnect between AI ambition and operational reality, as IT teams struggle with visibility, staffing, and shadow IT despite rising budgets. While most organizations are increasing investment and expressing optimism around AI, the report shows many lack the governance, time, and infrastructure needed to translate that momentum into…

Faster attacks and ‘recovery denial’ ransomware reshape threat landscape

Mandiant’s M-Trends 2026 report, released today at the RSA Conference, shows that attackers are moving faster, operating more collaboratively, and increasingly focusing on the systems organizations rely on to recover from breaches. The report, based on more than 500,000 hours of incident response engagements in 2025, finds that attackers are compressing key phases of the…

GUEST ESSAY: Executives trust AI security even as security teams confront blind spots, new risks

In our recent report, Beyond the Black Box, we found a striking gap: 80% of executives believe their organizations have strong security coverage for AI systems. Only about 40% of AppSec practitioners agree. Related: AI moves mainstream That’s not just a perception problem. It’s a visibility problem. The numbers back that up. Sixty-three percent of…

Report: AI Accelerates Attacks on Trusted Identities

A recent report from ConnectWise found that attackers are increasingly exploiting trusted identities, along with remote access infrastructure and software supply chains, while AI continues to accelerate in speed and scale. 2026 MSP Threat Report shows trusted identities and legitimate tools are top targets The research, ConnectWise’s 2026 MSP Threat Report, provides global threat intelligence…

No, it’s not ‘unnecessarily burdensome’ to control your own data

According to a recent report, the State Department sent a cable urging U.S. diplomats to oppose international data sovereignty regulations like GDPR, characterizing these guardrails as “unnecessarily burdensome.”  In the cable, the State Department claims that data sovereignty regulations “disrupt global data flows, increase costs and cybersecurity risks, limit Artificial Intelligence (AI) and cloud services, and…

Attackers are using your network against you, according to Cloudflare

Cloudflare’s inaugural threat intelligence report identifies a series of weaknesses in technology that attackers have abused and industrialized into professional “attack factories,” leaving most organizations unprepared to respond.  Attackers are turning the very services victims deploy and pay for into tools for launching large-scale attacks. Researchers say the barrier to entry has vanished, as identities…

News alert: DDoS attacks surge 75% in 2025; Link11 says attacks now sustained, not sporadic

FRANKFURT, Mar. 2, 2026, CyberNewswire — Link11 has published its European Cyber Report 2026, revealing that DDoS attacks reached a new level in 2025 and have become a permanent stress factor for digital infrastructures. The report shows that the number of documented attacks in the Link11 network rose by 75% in 2025, following explosive growth in…

AI Now Top Risk as 47% of Cloud Data Unencrypted: Thales

A new report warns that artificial intelligence is quickly becoming what it calls the “new insider threat,” and many companies are not ready.  According to the 2026 Thales Data Threat Report, nearly half of sensitive cloud data, 47%, remains unencrypted, even as AI systems gain broader access to corporate information. AI ranked as top data…

Exabeam Report: AI Key Driver in Cybersecurity Spend

Intelligence and automation enterprise, Exabeam, recently unveiled new findings from its multinational report, From Adoption to Accountability: The New Economics of AI in Cybersecurity. The survey obtained responses from 750 IT decision-makers responsible for security in organizations with 500+ employees across 12 countries. Cybersecurity budgets on the rise as AI alignment struggles to keep up…

Nozomi Networks Labs Report Finds Healthcare Services the Most Targeted Industry in Australia

The latest Nozomi Networks Labs OT & IoT Security Report released today finds healthcare services was the most targeted industry in Australia, followed by manufacturing. During the second half of last year, threat actors increased their usage of generative AI in their activity, attacks against companies in English-speaking countries are increasing in scale and have…

WatchGuard: New Malware Variants Surge 1,500% in H2 2025

A new report from WatchGuard Technologies reveals that unique malware detections on endpoints skyrocketed by 1,548% in the second half of 2025, even as overall malware volume dipped slightly.  Internet Security Report findings suggest threat actors are bypassing traditional defense The findings, published in the company’s H2 2025 Internet Security Report, highlight a sharp pivot…

Vectra AI Report Warns AI Gains Aren’t Boosting Resilience

Cybersecurity provider Vectra AI has published its 2026 State of Threat Detection and Response Report, revealing a persistent gap between security investment and real-world cyber resilience. Lagging confidence amid rising AI adoption Based on a survey of 1,450 security practitioners and leaders worldwide, the report found that while many security teams feel better staffed and…

AI will likely shut down critical infrastructure on its own, no attackers required

With a new Gartner report suggesting that AI problems will “shut down national critical infrastructure” in a major country by 2028, CIOs need to rethink industrial controls that are very quickly being turned over to autonomous agents. Gartner embraces the term Cyber Physical Systems (CPS) for these technologies, which it defines as “engineered systems that…

Google finds state-sponsored hackers use AI at ‘all stages’ of attack cycle 

A new report from Google found evidence that state-sponsored hacking groups have leveraged AI tool Gemini at nearly every stage of the cyber attack cycle. The research underscores how AI tools have matured in their cyber offensive capabilities, even as it doesn’t reveal novel or paradigm shifting uses of the technology. John Hultquist, chief analyst…

Picus Red Report 2026 Shows Attackers Favor Stealth Over Disruption

Cyber attackers are quietly changing how they operate — and the latest Picus Red Report shows that disruption is no longer the goal.  Rather than encrypting systems or triggering immediate disruption, Picus Security found that adversaries are prioritizing stealth, persistence, and long-term access within enterprise environments.  “The 2026 Red Report confirms that the era of…

Anthropic’s DXT poses “critical RCE vulnerability” by running with full system privileges

When LayerX Security published a report on Monday describing what it called “a critical zero-click RCE vulnerability in [Anthropic’s] Claude Desktop Extensions (DXT) that allows a malicious Google Calendar invite to silently compromise an entire system,” analysts, consultants, security leaders, and even Anthropic didn’t dispute the facts.  But the revelation did reignite the debate about…