Exclusive insights into the latest Threat Intelligence. Keeping constant watch over the cyber and geopolitical landscapes so you don’t have to.
Monthly Threat Intelligence Report
Ransomware falls 17% but attackers are shifting to messaging platforms
- Global ransomware attacks drop 17% in January
- Attackers are shifting to messaging platforms as new entry points
- Industrials remain most targeted sector, with 32% of all attacks in January
- North America victim to 54% of global attacks, followed by Europe with 22%
25 February 2026 – Global ransomware activity fell by 17% month-on-month in January, with 741 incidents recorded, but cyber security experts warn organisations should not become complacent. According to NCC Group’s January 2026 Cyber Threat Intelligence Report, threat actors are rapidly shifting their tactics, increasingly using messaging platforms such as WhatsApp, Signal and Telegram as primary entry points for attacks.
Monthly webinar
Our team of Threat Intel experts keep a constant watch over the cyber and geopolitical landscape, so you don’t have to.
Introducing our monthly highlights webinar, giving you further insight and exclusive access to what's going on now. Join our Global Head of Threat Intelligence, Matt Hull, each month for:
- A deeper understanding of the latest report findings
- A look at emerging trends by region and sector
- Insight into new threat actors
- Spotlight on the most impactful active cyber threats
Our next webinar will take place on March 24th 2026, 4pm GMT.
Matt Hull
Global Head of Threat Intelligence
Subscribe to our monthly reports and webinars for the latest on recent and emerging advances in the threat landscape and a deep understanding of the latest Tactics, Techniques and Procedures (TTPs) of threat actors.
Cyber Threat Intelligence report archive
On demand videos
Missed a webinar? Find every past recording in our showcase:
View now
Never miss any intelligence.
Hit the button below to get our monthly reports and highlight webinars straight to your inbox.