Scanned Image

The IBM X-Force Threat Intelligence Index 2026 synthesizes 2025 incident response and threat data to show a major rise in exploitation of public-facing applications, dramatic growth in tracked vulnerabilities (many exploitable without authentication), widespread supply-chain and third-party compromises, large-scale credential theft via infostealers (including hundreds of thousands of AI/chatbot credentials observed for sale), a fragmented but active ransomware ecosystem, and increasing convergence of nation-state and criminal TTPs — concluding that identity, secure configuration, supply-chain integrity and AI-aware defenses must be prioritized.