Cyberstats

Security Intelligence

VendorsReliaQuest

ReliaQuest

Cybersecurity reports and statistics published by ReliaQuest

8 categories2 reports

Research Reports

Reports and publications from ReliaQuest

Too Much Trust: The Danger of Over-Privileged Cloud Identities

Ransomware and Cyber Extortion in Q2 2025

Recent Statistics & Reports

44% of true-positive security alerts from cloud security tools in Q3 2025 were driven by identity-related weaknesses.

Cloud Security Identity Management Security alerts

52% of all confirmed identity-based alerts were due to identity-related privilege escalation.

Cloud Security Identity Management

99% of cloud identities were found to be over-privileged, creating significant security risks.

Cloud Security Identity Management

33% of raw CSPM alerts were identity-related, contributing to the operational burden on security teams.

Cloud Security Identity Management CSPM

As of October 2025, there are over 14,700 Jenkins servers exposed to the internet that remain vulnerable to CVE-2024-23897.

Vulnerabilities Cloud Security

71% of critical vulnerability alerts in Q3 2025 originated from just four legacy CVEs.

Vulnerabilities Cloud Security CVEs

DragonForce emergence: December 2023.

Ransomware DragonForce

Spain and other Spanish-speaking countries each accounted for less than 4% of Qilin's total victim volume in Q2.

Ransomware Qilin Spain

The US remained the most targeted country by ransomware, accounting for 67% of the total organizations named on ransomware data-leak sites in Q2.

Ransomware US Data leak site

DragonForce activity was up 119% between Q1 and Q2 2025.

Ransomware DragonForce

Lynx experienced a 41% drop in activity between Q1 and Q2 2025.

Ransomware Lynx

80% of the organizations named by Qilin in Q2 were based in the US.

Ransomware Qilin

Qilin showed an 80% increase in activity in Q2 compared to Q1 2025.

Ransomware Qilin

Akira has already listed 15% more victims in the first half of 2025 than it did throughout the entirety of 2024.

Ransomware Akira

Germany rose to second most targeted country by ransomware in Q2 2025, climbing two spots from fourth in Q1 2025.

Ransomware Germany

Q2 2025 saw a 31% decrease in named ransomware victims compared to the previous quarter, marking a return to more typical levels.

In Q1 2025, Clop named 389 victims on its data-leak site in February alone.

Ransomware Clop

SafePay's activity increased by 42% in Q2 2025 compared to Q1 2025.

Ransomware SafePay

Akira listed approximately 130 organizations to its data-leak site each quarter in 2025.

Ransomware Akira

LockBit named just 24 organizations on its data-leak site in Q2 2025. This figure represents only 11% of its Q2 2024 victim count.

Ransomware LockBit

Showing first 20 results

Top Categories

6

Identity Management

4

4

3

Vulnerabilities

2

2

Security alerts

Related Vendors

Cisco Talos Blog

Rubrik Zero Labs