IBM-X-Force-Threat-Intelligence-Index-2026.pdf

**Executive summary:** The IBM X-Force Threat Intelligence Index 2026 reports that 2025 saw a marked increase in exploitation of public-facing applications, a near-doubling of tracked vulnerabilities (many exploitable without authentication), a ~4x rise in major supply-chain/third-party compromises, widespread infostealer activity (including hundreds of thousands of chatbot credentials observed for sale), and a highly fragmented ransomware ecosystem—underscoring that identity weaknesses, misconfigurations, and supply-chain dependencies remain the primary drivers of large-scale cyber risk.