Third-Party Reports Archive

“”The first half of 2025 recorded 8.1 million DDoS attacks globally, with EMEA bearing the heaviest burden at 3.2 million.” (published August 2025). View the Report

The NATO Cooperative Cyber Defence Centre of Excellence’s “Ukraine as the Frontline of European Cyber Defence: Building Resilience in the Face of Russian Cyber Aggression“ (published August 2025). View the paper

ATIS’ White Paper on the implementation and operational aspects of implementing a zero trust architecture in the various cloud environments that are hosting 5G services (published August 2025). View the White Paper

IBM’s annual ‘Cost of a Data Breach’ survey carried out by The Ponemon Institute (2025). View the Survey

This Centre for Countering Disinformation guide  is not just a guide. It is a practical tool that systematises the key methods used in Russia’s information war against Ukraine (Published July 2025). View the Report

Nokia emerges well ahead of direct competitors in Telecom TV’s industry survey of market perceptions on quantum saftey leadership. (Published July 2025). View the Survey Report

ENISA’s 2024 annual summary contains reports of 188 telco security incidents submitted by national authorities, up 20% on 156 in 2023 (published July 2025).. View the report

“AI Agents Are Here. So Are the Threats.” A new report from Palo Alto Networks’ Unit 42 threat research team (published May 2025). View the Report.

Fortinet’s latest global threat landscape report shows how automation, AI and stolen credentials are fueling faster, more scalable cyberattacks (Published May 2025). View the report

This year Verizon’s DBIR shows of breaches were linked to third-party involvement, twice as much as last year (published April 2025). View the Report

The growing risk posed by infostealer malware and the danger of unsecured data repositories are among the threats highlighted in Mandiant’s new report (Published April 2025). View the Report

“Issue 14: DDoS: The Next Generation” (published April 2025)”. View the Report

Tailored to the needs of communications service providers, F-Secure’s ‘Cyber Threats Guide 2025’ offers critical insights into the evolving landscape of scams, personal data theft, and other emerging online risks. (published March 2025). View the Report

Trend’s overall average Cyber Risk Index n 2024 improved consistently per month, with a 6.2-point difference from the overall average in February to December (Published March 2025). View the Report

During 2024 ANSSI, the French cybersecurity agency, processed 4,386 security events, an increase of 15% compared to 2023. This English language translation of the report shares details and common trends across these events (published February 2025). View the Report

Adversaries are streamlining their tactics, refining and scaling successful strategies, and learning from both their own and their colleagues’ mistakes and successes to conduct attacks with a business-oriented approach. 2024 was the year of the enterprising adversary (Published February 2025). View the Report

The need for better collaborative intelligence sharing of information on the techniques and tactics employed by criminals is one of the take-aways from this new GSMA report (published February 2025). View the Report

Dragos’ 2025 OT/ICS Cybersecurity report provides detailed breakdowns of major incidents, including how adversaries gained access and executed attacks against industrial control systems (published February 2025).View the Report

n 2024, the Unit 42 IR team responded to over 500 cyberattacks, 86% of which caused direct business impact. Threat actors increasingly targeted multiple attack surfaces, leveraging Gen AI and advanced cloud tactics. (published February 2025) View the Report.

GSMA’s seventh annual Mobile Telecommunications Security Landscape report 2025 (published February 2025). View the Report

A steep rise in double extortion tactics and hybrid cloud-targeting attacks as well as notable dominance of malware variants like LockBit, Cl0p, and BlackCat are among the highlights of Red Piranha’s new threat report (Published February 2025). View the report

2024 saw the highest volume of annual ransomware cases since NCC Group started monitoring ransomware activity, with 5,263 attacks (Published January 2025). View the report

Whalebone shares its most recent threat intel findings observed across all malicious traffic analyzed DNS resolvers (Published January 2025). View the report

Cyber Threat Alliance’s Cybersecurity in the Age of Gen AI Joint Part 2 – Navigating Cyber threats to Gen AI systems (Published January 2025). View the report

Cyber Threat Alliance’s Cybersecurity in the Age of Gen AI Joint Part I – Combating GenAI Assisted Cyber Threats (Published January 2025). View the report

Emerging attack trends to watch for in 2025 and beyond from Fortinet’s FortiGuard Labs (Published January 2025). View the report

AI-powered attacks, geopolitical tensions, and sophisticated cyber crime attacks are just a few of the challenges organizations will face in the coming year. (Published December 2024) (Published November 2024). View the report

64% of the companies surveyed didn’t have a way for security researchers to contact them acording to this new Copper Horse report on VDP usage in consumer IoT (Published November 2024). View the Report

Cybercriminals are taking scams to the next level, from sneaky malware disguised as CAPTCHA prompts to a surge in “Scam-Yourself Attacks” (Published November 2024). View the Report

A first report from the WEF-backed Cybercrime Atlas on how companies in the financial and broader digital ecosystem are using open source threat intel to identify chokepoints in the cybercriminal ecosystem to conduct coordinated disruption campaigns (published October 2024). View the report

90% of organizations experienced an increase in impactful attack surface incidents and 66% find external attack surface threat intelligence tools ineffective, according to this new TacitRed survey report (published October 2024). View the report

V2.0 of ‘Post Quantum Guidelines for Telecom Use Cases’ supports a detailed migration planning exercise for operators and technology vendors, including an analysis of standards, functional architecture and performance for each use case (published October  2024). View the Report

Bitdefender’s “2024 Consumer Cybersecurity Assessment Report” (Published April 2024). View the Survey

Bitdefender’s “Cybersecurity Trends among Telco Customers in the U.S” (Published September 2023). View the Survey

“Issue 13: An Era of DDoS Hactivism” (published October 2024). View the Report

“What’s selling on the dark web, how one organization escaped an advanced persistent threat, and how you’re being phished in 2024” (published October 2024). View the report

Nokia’s 2024 threat report shows that the number and frequency of DDoS attacks has grown from one or two a day to well over 100 per day in many networks (Published October 2024). View the Report

“A leaked Cox Media Group pitch deck reveals their Active Listening technology, designed for ad targeting based on what people say near their devices, proves your phone is listenting to you” (published September 2024). View the Alert

The annual report highlighting the work of the CSCC and its inputs into the other private and public sector bodies charged with defending America’s critical infrastructure against cyber and other threats (published 2024). View the Document

The 5th edition of the ITU’s Global Cybersecurity Index (GCI) measures the commitment of countries to cybersecurity across the five pillars of Legal, Technical, Organizational, Capacity Development, and Cooperation (Published September 2024). View the Document

This document outlines procedures for GSMA members and eligible non-members to exchange certificates and key material to facilitate use cases that rely on public key cryptographic algorithms. (published September2024). View the Document

SonicWall’s Mid-Year Cyber Threat Report covers significant increases in IoT Malware, encrypted threats and more. (published September 2024). View the report

ENISA analyzed several thousand publicly reported cybersecurity incidents and events to arrive at its ‘2024 Threat Landscape’ report. Threats to availability feature most prominently, followed by ransomware threats (published September 2024). View the report

The most prevalent cyber threats Allot is seeing targeting mobile and fixed internet users, categorized into browser-related threats, malicious links and sites, and remote-control threats (published August 2024). View the report

The 2024 Imperva DDoS Threat Landscape Report offers a comprehensive analysis of DDoS attack activity during the first half of 2024, highlighting significant events and providing strategic recommendations (published July 2024). View the Report

After a prolonged run of market leading growth, cyber insurance is entering a new phase in its journey to maturity, according to global insurance group, Howden (published 2024). View the Report

IBM’s annual ‘Cost of a Data Breach’ survey carried out by The Ponemon Institute (2024). View the Survey

The GSMA’s ‘IoT Security Guidellines’ promote best practice for the secure design, development and deployment of hashtag#IoT services, and provide a mechanism to evaluate security measures (April 2024). View the Guidelines

While the Tokyo Olympics faced serious cyber threats, the Paris 2024 Games are expected to face even greater challenges. Read the Cyber Threat Alliance ‘s assessment of what those threats look like (Published July 2024). View the Report

The ORAN Alliance Security Working Group’s (WG 11) “A Zero Trust Architecture for Secure ORAN” (Published May 2024). View the Report

The 2024 Thales Cloud Security Study is in its fourth consecutive year. This year’s study revisits the latest trends affecting cloud security, surveying 3,000 respondents from 18 countries across 37 industries (Published June 2024). View the Report

Akamai’s “State of the Internet Report: How Web Scrapers Impact Ecommerce” (Published June 2024). View the Report

ETSI and the Institute for Quantum Computing are hosting ETSI/IQC Quantum Safe Cryptography Conference (Madrid, June 3rd – 5th 2025).View the event home page

F‑Secure’s ‘Living Secure’ survey questioned 7,000, consumers from seven countries: Brazil, Finland, France, Germany, Sweden, UK, USA. (Published June 2024). View the Survey

Censys’ 2023 report focusing on how activity on web entities signals how the internet is – and is not – becoming more secure (Published 2024). View the Report

A 14-month look at attacker behaviors pulling data from Rapid7’s research, managed detection and response, and threat intelligence teams (Published 2024). View the Report

Why are deepfakes rising? What’s the most frequently defrauded document? What are fraudsters looking for when attacking biometrics? Get the answers from Onfido’s Identity Fraud Report 2024.(Published Spring  2024). Access the Report

This year Verizon’s DBIR shows 25% of attacks in APAC are motivated by espionage – significantly greater than in Europe and North America (published 1st May 2024). View the Report

This second iteration of the “ENISA Foresight Cybersecurity Threats for 2030” study presents a comprehensive assessment of emerging cybersecurity threats projected for the year 2030 (published April 2024). View the Report

With multiple cyber threat vectors impacting election-related infrastructure, it is vital for defenders to identify the most likely scenarios that could impact them (published April 2024). View the blog

Visa highlights a more savvy scammer in its Spring 2024 Threats Report (Published Spring 2024). View the Report

The rise of tech-savvy and politically motivated DDoS hacktivism that transcends geographic borders signifies a distinct shift in the global cybersecurity landscape (published March 2024). View the Report

An inside look at the evolving cyber threat landscape, with data drawn directly from frontline incident response investigations and threat intelligence findings of high-impact attacks and remediations around the globe. (Published 2024). Download the Report

FS-ISAC’s annual industry-wide report highlights key threats and trends in the cyber landscape and our views on the biggest cyber risks for the financial sector in 2024 (Published March 2024) View the Report

The 2024 Imperva Threat Research report reveals that almost 50% of internet traffic comes from non-human sources. Bad bots, in particular, now comprise nearly one-third of all traffic (published 2024). View the Report

The Thales Data Threat report shares insights on the cybersecurity experiences gleaned from  nearly 3,000 respondents at the individual contributor, managerial and executive levels from 18 countries across 37 industries. (Published March 2024). View the Report

Learn about cybersecurity in Ukraine – the latest legislative amendments and changes, initiatives of national actors, trends, domestic and international forecasts and analytical assessments (published March 2024). View the report

“In total, 2,207 U.S. hospitals, schools and governments were directly impacted by ransomware over the course of the year.” (Published April 2024). View the Blog

This paper examines the potential security implications of Intent-based Management (IbM) systems based on O-RAN, highlighting the associated threat landscape (published March 2024). View the Report

“AI will play a pivotal role in shaping the evolution of our society, as well as how scammers and cyber criminals amplify their operations.” See F-Secure’s new report for more (Published April 2024). View the Report

MoTIF a first version of a framework for describing how adversaries attack and use mobile networks, based on the TTPs they use (published April 2024) View MoTIF

GSMA MOTIF Chair, Enea AB’s Cathal McDaid, explains what the Mobile Threat Intelligence Framework (MOTIF) is and why it’s needed (April 2024). View the Blog

This ENISA study maps the most relevant among existing cybersecurity standards to each of the requirements of the EU’s Cyber Resilience Act as well as highlights possible gaps to be addressed. (published 2024). View the Report

Enea’s survey report: “Mobile Network Security: Bridging the gap between enterprise needs and CSP capabilities” (published March 2024). View the Report

Only 3% of respondent organizations qualify for Cisco’s “Mature” category. Nearly three-quarters (71%) fall in the bottom two categories – Formative, 60% and Beginner, 11%. (Published March 2024). View the Report

GSMA’s “Mobile Telecommunications Security Landscape 2024” (published February 2024). View the Report

While both defenders and cybercriminals have discovered use cases for GenAI, Red Canary sees defenders as having the edge (Published February 2024). View the Report

Investment fraud was once again the costliest type of crime with losses rising to $4.57 billion in 2023 The second-costliest type of crime was business e-mail compromise (BEC). Tech support scams were the third-costliest (Published March 2024). View the Report

In the past year, attackers’ initial access most often started with a software vulnerability. The largest attack campaigns began with successful exploitation of internet-facing systems. From there, the stories varied (published 2024). View the Report

Organizations must overcome several barriers on the path to preparing for a safe post-quantum computing future. How does your organization measure up? (Published October 2023). View the Survey Report

SoftBank partnered SandboxAQ to test several new PQC algorithms, in conjunction with its existing cryptographic protocols, to determine their impact on network security and performance (published 2023). View the Case Study

Vodafone joined forces with SandboxAQ to conduct a proof-of-concept test for a quantum safe VPN (published 2023). View the Case Study

The GSMA-backed task force has published ‘Post Quantum Guidelines for Telecom Use Cases’ (published February 2024). View the Report

The “Cybersecurity and Resiliency of Europe’s Comms Infrastructures and Networks” report (published February 2024). View the Report

Voice fraud, AI, AIT, Wi-Fi offloading and The EU’s new Digital Networks Act feature at the heart of Enea’s “Mobile Trends Report 2024” (published February 2024) View the Report

CrowdStrike’s Global Threat Report 2024 is out (Published February 2024) View the Report

Nokia’s 2023 report identifying attack trends for protecting telecom networks and customers’ data.  (Published 2023) View the Report

Dragos’ 2023 OT Cybersecurity Year in Review report synthesizes the latest OT threat intelligence, vulnerabilities in industrial control systems, and defense mechanisms from the trenches (published February 2024).

During 2023 O-RAN security specifications were enhanced with new requirements and controls to bring O-RAN closer to a zero trust architecture. (Published Feb 2024) View the Report

CTA’s role as an intelligence sharing organization is to enable relevant information to move across the boundaries that exists between cybersecurity providers (Published December 2023) View the Report

Hiya’s State of the Call report showcases trends and insights about the voice call market and the extent of its vulnerability to fraud. (Published End 2023).View the Report

NGMN has identified several technology trends that will influence the trustworthiness of a 6G network including network AI, open source, virtualisation and containerization, and quantum computing which might bring new security threats (Published October 2023). View the Report

A joint White Paper published by HardenStance partner, the Cyber Rescue Alliance, and Nokia entitled "Cyber Security In The Boardroom". Download the White Paper 

Access to the new report I've researched and written for Analysys Mason

A Nokia White Paper I wrote for Heavy Reading looking at a new model for leveraging data analytics and an operator's router infrastructure to protect against DDoS attacks. https://pages.nokia.com/T001OQ-Deepfield.html