Cyber Security Report Calendar

January

Allianz Risk Barometer

Allianz Commercial Insurance

2026 Edition →

WEF Global Cybersecurity Outlook

World Economic Forum Intl Gov

2026 Edition →

WEF Global Risks Report

World Economic Forum Intl Gov

2026 Edition →

February — Peak Season

CrowdStrike Global Threat Report

CrowdStrike Threat Intel

2026 Edition →

IBM X-Force Threat Intelligence Index

IBM Threat Intel

2026 Edition →

Sophos Active Adversary Report

Sophos Threat Intel

2026 Edition →

Unit 42 Global Incident Response Report

Palo Alto Networks Threat Intel

2026 Edition →

Dragos OT/ICS Cybersecurity Year in Review

Dragos OT / CNI

2026 Edition →

CISA ICS Advisories

CISA OT / CNI

Rolling — ongoing advisories →

E-ISAC GridEx Exercise Reports

NERC / E-ISAC OT / CNI

Biennial (odd years) →

March

Mandiant M-Trends

Google / Mandiant Threat Intel

2026 Edition →

NCC Group Annual Cyber Threat Intelligence

NCC Group Threat Intel

2025 Report →

Coalition Cyber Claims Report

Coalition Insurance

2026 Edition →

Proofpoint Human Factor (multi-vol)

Proofpoint Threat Intel

2025 Vol.1 (Vol.2 follows ~Aug) →

April

DSIT Cyber Security Breaches Survey

DSIT / Home Office UK Gov

2025/2026 Edition →

May

Verizon Data Breach Investigations Report

Verizon Breach Data

2026 Edition →

June

Quieter month — watch for mid-year vendor updates and conference outputs (Gartner SRM, Infosecurity Europe).

July

IBM Cost of a Data Breach Report

IBM / Ponemon Breach Cost

2025 Edition (2026 due Jul) →

August

Quieter month — Proofpoint Human Factor Vol.2 typically lands around this time.

September

Pre-conference season — watch for previews ahead of October reports.

October — Second Peak

ENISA Threat Landscape

ENISA EU Gov

2025 Edition →

Microsoft Digital Defense Report

Microsoft Threat Intel

2025 Edition →

NCSC Annual Review

NCSC (GCHQ) UK Gov

2025 Edition →

November

Supplementary releases and follow-up webinars from October reports.

December

Year-end round-ups. NCC Group Monthly Threat Pulse continues throughout the year.

Notes & Caveats

Proofpoint restructured from "State of the Phish" (single annual, ~Jan) to multi-volume "Human Factor" series in 2025. Cadence not yet established across multiple years.
E-ISAC GridEx reports are from a biennial exercise (odd years). Reports are typically restricted to NERC participants.
FS-ISAC annual reports excluded — behind membership gates with no public links.
Secureworks State of the Threat report merged into Sophos following Feb 2025 acquisition.
CISA ICS Advisories are rolling (not annual) — included as a daily monitoring source for OT/CNI.
IBM Cost of a Data Breach 2026 edition not yet released as of May 2026 — expected July 2026.