Proofpoint

SANS

State Of ICS Security (2025) - Examines the current state of industrial control systems and operational technology security by analyzing incident trends, regulatory impacts, and defensive maturity across critical infrastructure sectors. Key findings reveal that while 50 percent of incidents are detected within 24 hours, 19 percent of organizations require over a month to remediate, and regulated sites experience 50 percent fewer financial losses and safety impacts compared to their unregulated peers

Duha

State of Security Vendors RSAC (2026) - Examines the current landscape of cybersecurity vendors at the RSA Conference, focusing on marketing trends, booth design strategies, and the prevalence of artificial intelligence terminology. Key findings reveal that 37 percent of the 607 observed exhibitors explicitly featured artificial intelligence in their messaging, while 8 percent of booths failed to clearly communicate their core value proposition to security practitioners

Yubico

Global State Of Authentication Report (2025) - Analyzes global authentication habits and the persistent perception-reality gap between employee security beliefs and modern cyber vulnerabilities. Key findings from the survey of 18,000 employed adults reveal that 40% of employees have never received cybersecurity training, and 62% of organizations still rely primarily on vulnerable username and password credentials

Tailscale

State of Zero Trust (2025) - Focuses on the current state of Zero Trust adoption, highlighting the challenges and frustrations faced by IT, security, and engineering teams. Key insights reveal that fewer than one-third of organizations employ identity-based access as their primary model, while 83% of personnel admit to circumventing security measures to maintain productivity