Skip to main content
VendorsPicus

Picus

Cybersecurity reports and statistics published by Picus

8 categories2 reports

Research Reports

Reports and publications from Picus

Recent Statistics & Reports

Maori, a ransomware strain, had a prevention effectiveness rate of 41%.

8/11/2025
RansomwareMaori

Infostealer malware has tripled in prevalence.

8/11/2025
Infostealer

Attacks using valid credentials were successful 98% of the time.

8/11/2025
Valid credentials

Logging coverage held steady at 54%.

8/11/2025
Logging

BlackByte, a ransomware strain, had a prevention effectiveness rate of just 26%.

8/11/2025
RansomwareBlackByte

BabLock, another ransomware strain, had a prevention effectiveness rate of 34%.

8/11/2025
RansomwareBabLock

Discovery techniques like System Network Configuration Discovery and Process Discovery scored below 12% in prevention effectiveness.

8/11/2025
Discovery techniques

Overall prevention effectiveness declined from 69% in 2024 to 62% in 2025.

8/11/2025
Prevention

Only 14% of attacks generated alerts.

8/11/2025
Cyber attacksAlerts

Data exfiltration attempts were only stopped 3% of the time in 2025. This is down from 9% in 2024, representing a 3x decrease.

8/11/2025
Data exfiltration

In 46% of tested environments, at least one password hash was successfully cracked. This is an increase from 25% in 2024.

8/11/2025
Password

93% of all malicious actions observed could be mapped to just 10 MITRE ATT&CK techniques.

2/1/2025

93% of all malicious actions observed could be mapped to just 10 MITRE ATT&CK techniques.

2/1/2025

25% of the malware examined showed behaviours related to T1555 (Credentials from Password Stores).

2/1/2025

On average, malware now executes 14 malicious actions.

2/1/2025

There has been a 3X increase in malware specifically targeting credential stores like password managers and browser-stored login data.

2/1/2025

Process Injection (T1055) has a prevalence rate of 31%.

2/1/2025

On average, malware now executes 14 malicious actions.

2/1/2025

25% of the malware examined showed behaviours related to T1555 (Credentials from Password Stores).

2/1/2025

Process Injection (T1055) has a prevalence rate of 31%.

2/1/2025

Showing first 20 results