Threat Landscape stories
Mobile users are most at risk as quishing has surged in New Zealand, with scammers exploiting delivery and parking prompts.
New Zealand businesses will gain managed detection and response support as Securecom opens Arctic Wolf's security operations portfolio to local customers.
Banks and fintechs face mounting risk as application-layer attacks and bot activity increasingly exploit Asia Pacific's expanding digital finance links.
Exposed systems are becoming the main target, as Rapid7 says flaws were used in 38% of incidents and patch windows shrank to five days.
Sustained assaults are disrupting online banking and payments as EMEA becomes the main target for DDoS campaigns against lenders.
AI-related training is shifting as prompt injection, model exploitation and agent hijacking shape how security teams prepare for live attacks.
Many smaller firms lack the expertise and controls to counter AI-enabled phishing and deepfakes, Sage's research shows.
Enterprises are testing only about 32% of their attack surface, leaving many assets outside regular security checks as threats grow faster.
The findings show many firms still leave internet-facing databases and admin tools open, giving attackers easy routes before flaws are even published.
AI systems and social engineering tests proved especially risky, as CyberCX found severe weaknesses in half and 77% of cases respectively.
A smaller band of operators is driving most incidents, leaving companies facing fewer but more organised ransomware gangs.
AI-written phishing is forcing security teams to rethink email defences as Ocean claims its system already scans more than one billion messages a month.
Security teams face a shrinking window to spot and fix flaws as AI models like Mythos find exposures in minutes, not days.
Supplier oversight is becoming a bigger cyber priority as one in three Canadian businesses reported an AI-linked incident in the past year.
Federal contractors face rising scrutiny as speakers warned CMMC and AI are becoming central to procurement, resilience and national security.
Businesses face tighter cyber and governance expectations as ministers push a resilience Bill and voluntary digital ID schemes across the UK.
Exposure of operational technology is leaving industrial operators most vulnerable, with attacks able to halt production and disrupt essential services.
Most Australian organisations are using or planning AI agents for security tasks before formal controls are in place, Semperis found.
Thailand has joined the ransomware top 10 as fewer groups now drive most attacks, raising the cost of each breach for businesses.
Ransomware pressure on Canadian firms is intensifying as AI speeds attacks, with 374 organisations extorted and losses mounting.