VendorsCobalt
Cobalt
Cybersecurity reports and statistics published by Cobalt
8 categories5 reports
Research Reports
Reports and publications from Cobalt
Recent Statistics & Reports
Sensitive data exposure: 10.5% in the financial services industry (versus 8.0% average in other industries).
9/30/2025•
Financial servicesPen testVulnerabilities
78% of financial services firms report fixing critical vulnerabilities in business-critical assets within 14 days, indicating they narrowly meet strict internal SLA requirements.
9/30/2025•
Financial servicesPen testVulnerabilities
70% of financial services firms report that delays in scheduling pentests sometimes impact compliance or business timelines.
9/30/2025•
Financial servicesPen testCompliance
Industries like hospitality resolve serious findings significantly faster than the financial services industry (61 days vs 20 days).
9/30/2025•
Financial servicesPen testMTTR
The financial services industry resolves about two-thirds (66.7%) of serious findings. This ranks the industry 10 out of the 13 industries Cobalt researched.
9/30/2025•
Financial servicesPen testVulnerability resolution
76% of financial services leaders highlight third-party software vulnerabilities as a top concern.
9/30/2025•
Financial servicesPen testVulnerabilities
Financial services firms demonstrate strengths in avoiding common, code-level flaws due to mature security programs and automated scanning (SAST/DAST). However, they struggle with vulnerabilities that require human-led testing.
9/30/2025•
Financial servicesPen testVulnerabilities
Business logic flaws: 2.9% in the financial services industry (versus 2.3% average in other industries).
9/30/2025•
Financial servicesPen testVulnerabilities
Server-side injection (Web/API): 4.2% in the financial services industry (versus 5.3% average in other industries).
9/30/2025•
Financial servicesPen testVulnerabilities
Components with known vulnerabilities: 6.1% in the financial services industry (versus 5.5% average in other industries).
9/30/2025•
Financial servicesPen testVulnerabilities
Approximately one-third of serious issues are never resolved by the organizations in the financial services industry, contributing to backlog and systemic risk.
9/30/2025•
Financial servicesPen testVulnerability resolution
The half-life for serious findings is 147 days in the financial services industry. This metric, which accounts for unresolved vulnerabilities, places FS ninth overall out of the thirteen measured industries.
9/30/2025•
Financial servicesPen testHalf-life
Cross-site scripting (Web/API): 5.0% in the financial services industry (versus 9.7% average in other industries).
9/30/2025•
Financial servicesPen testVulnerabilities
68% of financial services leaders highlight GenAI-related risks as a top concern.
9/30/2025•
Financial servicesPen testGenAI
Server security misconfigurations: 34.9% in the financial services industry (versus 27.9% average in other industries).
9/30/2025•
Financial servicesPen testVulnerabilities
46% of financial services leaders highlight insider threats as a top concern.
9/30/2025•
Financial servicesPen testInsider threat
The Median Time to Remediation (MTTR) for serious findings is 61 days in the financial services industry. This ranks financial services 11th of 13 industries measured.
9/30/2025•
Financial servicesPen testMTTR
14% of healthcare organizations resolve critical findings in business-critical within eight to 14 days.
9/3/2025•
HealthcarePen testVulnerabilities
68% of healthcare leaders cited third-party software as the top risk.
9/3/2025•
HealthcareThird-party risk
The 2025 breach at DaVita compromised over 900,000 patients' personal and clinical data.
9/3/2025•
HealthcareBreach
Showing 1-20 of 78 results