Annual Cyber Threat Reports
Reading annual cyber threat reports has helped me understand the big-picture threat landscape, APTs and other attackers, TTPs, mitigations, the work of cyber threat intelligence, and how to communicate through threat reports.
Here are a few sources for annual (and semiannual) cyber threat reports, in alphabetical order. Some are freely available, and others require registration (filling out a form) to access. The links should take you to the latest editions of the reports. I’ve noted the months they’re published.
Some companies include in the report title the year the report covers; others put the year the report was published. So two reports published at the same time could have two different years in their titles. Pay attention to the publication dates.
If you know of others that are worthwhile, please let me know.
- Check Point Cyber Security Report (Feb) and Check Point Mid-Year Cyber Attack Trends Report (Aug) (registration required)
- Cisco Talos Year In Review (Dec)
- CrowdStrike Annual Global Threat Report (Feb) (registration required)
- Dragos ICS Cybersecurity Year in Review (Feb) (registration required)
- Elastic Global Threat Report (Nov) (registration required)
- Flashpoint State of Cyber Threat Intelligence (Mar) (registration required)
- Fortinet Global Threat Landscape Report (semiannual, Feb & Aug) (registration required)
- IBM Security X-Force Threat Intelligence Index (Feb) (registration required)
- Intel 471 The 471 Cyber Threat Report (Aug) (registration required)
- IronNet Annual Threat Report (Mar)
- Mandiant M-Trends Report (Apr) (registration required)
- Microsoft Digital Defense Report (Oct)
- Proofpoint The Human Factor (Jun) (registration required)
- PwC Cyber Threats [YYYY]: A Year in Retrospect (Apr) (registration required)
- Recorded Future [YYYY] Annual Report (Mar)
- Red Canary Threat Detection Report (Mar)
- ReliaQuest Annual Cyber-Threat Report (Jun) (registration required)
- Secureworks State of the Threat Report (Oct) (registration required)
- SonicWall Cyber Threat Report (Feb) (registration required)
- Sophos Threat Report (Nov)
- Truesec Threat Intelligence Report (Feb) (registration required)
- Verizon Data Breach Investigations Report (DBIR) (Jun)
