Threat Landscape stories
Mobile users are most at risk as quishing has surged in New Zealand, with scammers exploiting delivery and parking prompts.
Enterprises are testing only about 32% of their attack surface, leaving many assets outside regular security checks as threats grow faster.
The findings show many firms still leave internet-facing databases and admin tools open, giving attackers easy routes before flaws are even published.
AI systems and social engineering tests proved especially risky, as CyberCX found severe weaknesses in half and 77% of cases respectively.
A smaller band of operators is driving most incidents, leaving companies facing fewer but more organised ransomware gangs.
Undisclosed attacks outnumbered public cases by nine to one, with healthcare and government still bearing the brunt of the ransomware threat.
Pressure is mounting on security teams as non-human identities and AI tools outpace controls, leaving APAC firms exposed to misuse.
A widening visibility gap is leaving organisations exposed, with AI now involved in 83 per cent of reported breaches, Gigamon found.
Federal contractors face rising scrutiny as speakers warned CMMC and AI are becoming central to procurement, resilience and national security.
Businesses face tighter cyber and governance expectations as ministers push a resilience Bill and voluntary digital ID schemes across the UK.
Exposure of operational technology is leaving industrial operators most vulnerable, with attacks able to halt production and disrupt essential services.
Most Australian organisations are using or planning AI agents for security tasks before formal controls are in place, Semperis found.
Thailand has joined the ransomware top 10 as fewer groups now drive most attacks, raising the cost of each breach for businesses.
Ransomware pressure on Canadian firms is intensifying as AI speeds attacks, with 374 organisations extorted and losses mounting.
Security teams could cut false positives and speed fixes as the new tool ties vulnerability alerts to live network device states.
More consumers are losing larger sums to fraud as fake invoice and investment scams drive the biggest financial harm, F-Secure says.
Business leaders say burnout is a hard financial risk, urging employers to build mental health into job design, leadership and daily operations.
Many firms are missing exposed systems and credentials, leaving attackers an easier route in as breaches hit 43% of UK businesses last year.
Rising phishing, smishing and social engineering attacks are exposing connected cameras and access systems to credential theft, Genetec says.
Vulnerability exploitation has collapsed from years to hours, leaving organisations racing to fix exposed systems before attackers do.