Current threat landscape
How attackers operate today, what role AI tools play – and what protects effectively.
Facts and figures
The threat is real – for small companies too.
48,185
new vulnerabilities (CVEs) published in 2025 – about 130 a day
31%
of breaches began with an exploited vulnerability – now the top entry point (Verizon DBIR 2026)
48%
of breaches involved ransomware or extortion (Verizon DBIR 2026)
$4.99M
average cost of a data breach worldwide (IBM 2026)
Attack vectors
How attackers get in today.
// 01
Phishing – now with AI
AI produces flawless, personalised messages. Spelling mistakes are no longer a reliable warning sign.
// 02
Ransomware with data theft
Data is encrypted and also exfiltrated – with the threat of publication.
// 03
Stolen credentials
A single stolen password is enough if multi-factor sign-in is not enabled.
// 04
Unpatched systems
Firewalls, VPN gateways and internet-facing servers are scanned automatically for known vulnerabilities.
// 05
CEO fraud and deepfakes
Faked voices or videos of executives trigger payments or the release of data.
// 06
Via suppliers and software
Attacks increasingly run through supplier access or compromised software updates.
Shadow AI
Data leaks through AI tools in everyday work.
The biggest AI risk often comes not from attackers but from well-meant use: texts, customer data or source code are “quickly” pasted into a public AI service – and thereby leave the company. A well-known example: in 2023, Samsung employees entered source code and meeting notes into ChatGPT several times within a few weeks.
- Confidential input ends up with external providers and, depending on the service and settings, is stored or reused there.
- Private accounts and free versions are not covered by company rules or a data processing agreement.
- Prompt injection: hidden instructions in web pages, e-mails or documents make AI assistants reveal data or perform actions. National cyber security authorities explicitly warn about this.
- AI agents and extensions with access to mailboxes, calendars or files enlarge the attack surface.
Protection
What actually helps.
Most attacks can be made considerably harder with a few consistently implemented measures.
Sources
- Verizon – 2026 Data Breach Investigations Report (22,000 breaches, 145 countries)
- BACS (Bundesamt für Cybersicherheit) – semi-annual report on the cyber-threat situation in Switzerland
- IBM / Ponemon Institute – Cost of a Data Breach Report 2026
- Jerry Gamblin – 2025 CVE Data Review (published CVE records 2025)
- ENISA – Threat Landscape 2025 (EU)
- UK NCSC – The near-term impact of AI on the cyber threat (also covers prompt injection)
- TechCrunch – Samsung bans generative AI tools after internal data leak (2023)
Last updated: October 2026. Figures are taken from the publications listed.