Threat Landscape stories
Businesses face tighter cyber and governance expectations as ministers push a resilience Bill and voluntary digital ID schemes across the UK.
Exposure of operational technology is leaving industrial operators most vulnerable, with attacks able to halt production and disrupt essential services.
Business leaders say burnout is a hard financial risk, urging employers to build mental health into job design, leadership and daily operations.
Many firms are missing exposed systems and credentials, leaving attackers an easier route in as breaches hit 43% of UK businesses last year.
Vulnerability exploitation has collapsed from years to hours, leaving organisations racing to fix exposed systems before attackers do.
Businesses are being urged to replace password-only logins as stolen credentials still feature in 22% of confirmed breaches.
The findings show many firms still leave internet-facing databases and admin tools open, giving attackers easy routes before flaws are even published.
AI systems and social engineering tests proved especially risky, as CyberCX found severe weaknesses in half and 77% of cases respectively.
A smaller band of operators is driving most incidents, leaving companies facing fewer but more organised ransomware gangs.
Undisclosed attacks outnumbered public cases by nine to one, with healthcare and government still bearing the brunt of the ransomware threat.
Pressure is mounting on security teams as non-human identities and AI tools outpace controls, leaving APAC firms exposed to misuse.
A widening visibility gap is leaving organisations exposed, with AI now involved in 83 per cent of reported breaches, Gigamon found.
Most Australian organisations are using or planning AI agents for security tasks before formal controls are in place, Semperis found.
Thailand has joined the ransomware top 10 as fewer groups now drive most attacks, raising the cost of each breach for businesses.
Mobile users are most at risk as quishing has surged in New Zealand, with scammers exploiting delivery and parking prompts.
Ransomware pressure on Canadian firms is intensifying as AI speeds attacks, with 374 organisations extorted and losses mounting.
Security teams could cut false positives and speed fixes as the new tool ties vulnerability alerts to live network device states.
More consumers are losing larger sums to fraud as fake invoice and investment scams drive the biggest financial harm, F-Secure says.
Rising phishing, smishing and social engineering attacks are exposing connected cameras and access systems to credential theft, Genetec says.
Rising email fraud is driving KnowBe4's regional expansion, as security chiefs warn that AI-made attacks are targeting Asia's businesses.