Criticality Live streams Wednesdays 11am CT · Watch here

Breach Watch

The incidents that
should shape your roadmap.

Curated coverage of the cybersecurity incidents worth knowing about, not just the ones making headlines. Each entry tells you what happened, what the attackers did, and what your program can learn from it.

Updated July 2026

The State of Cyber Right Now

The volume story. AI is pouring gasoline on it.

2025 & 2026 · Sourced · Refresh Quarterly
+20.6% YoY
48,185
New CVEs Published in 2025

Roughly 131 new vulnerabilities every single day, an all-time record.

Source: CVE.org · Jerry Gamblin

Record
146
Active Ransomware Groups

More than double the 61 groups tracked in 2023. Sixty-one new entrants in the last twelve months alone.

Source: Black Kite 2026 Ransomware Report

+89% YoY
89%
Rise in AI-Enabled Attacks

Adversaries scaling reconnaissance, phishing, malware generation, and evasion using AI.

Source: CrowdStrike 2026 Global Threat Report

+24.9% YoY
7,551
Ransomware Victims Disclosed

Fourth straight year setting a new record. US absorbed 49.3% of all attacks.

Source: Black Kite · April 2025-March 2026

New in 2025
1,418
AI-Specific Vulnerabilities

Bugs in AI frameworks, inference engines, and AI-integrated tooling. 94% rated high or critical severity.

Source: Zafran Vulnerability Report 2025

+11x Explosion
22%
Cases Now Data-Only Extortion

Up from just 2% a year ago. Attackers skip encryption entirely, steal data, extort on the leak.

Source: Arctic Wolf 2026 Threat Report

All-Time High
90
Zero-Days Exploited in 2025

Enterprise tech hit an all-time-high 48% share. Mean time to exploit is now negative seven days.

Source: Google Threat Intelligence Group · Mandiant

+9% YoY
$10.22M
US Average Breach Cost

Record high. Shadow-AI breaches add $670K on average. Global average dropped 9% to $4.44M.

Source: IBM 2026 Cost of a Data Breach

Every figure links to a primary published source. Refresh cadence: quarterly.

Recent Incidents

What happened. Why it matters. What to do.

Every card here is a real 2026 incident. Read them not as news but as scenarios: could your program have caught this?

Turn Coverage Into Action

Worried your program has a similar gap?

If any of these incidents made your stomach drop, that's the moment to have a real conversation. Book a technology review and we'll pressure-test your posture against the tactics attackers are actually using.

Request a Technology Review →

Sources & Attribution: Statistics and findings on this page are cited from third-party research reports including the Verizon Data Breach Investigations Report, CrowdStrike Global Threat Report, Mandiant M-Trends, IBM Cost of a Data Breach Report, IBM X-Force Threat Intelligence Index, and the Arctic Wolf Threat & Predictions Report. Additional sources cited inline where used. Statistics referenced under nominative fair use with full attribution to their publishers. No endorsement, sponsorship, or partnership with any cited organization is implied or claimed.