Report by Google Cloud Security
Cybersecurity Forecast 2026
Key Findings
A steady pace of Russian cyber espionage in Europe and North America was noted in 2025.
Pro-Russia hacktivist groups compromised a Norwegian dam in April 2025.
Aggressive Iranian tactics, such as the risk of wiper deployment, have been observed since October 2023.
The number of victims listed on data leak sites (DLS) reached 2,302 in Q1 2025. This count represented the highest single quarter count observed since tracking of these sites began in 2020.
North Korean cyber threat actors executed the largest recorded cryptocurrency heist valued at approximately $1.5 billion.
A decline in disruptive and destructive Russian cyberattacks has been observed since 2022.
Elections remained a prime target for pro-Russian information operations in 2025, including polls in Poland, Germany, Canada, and Moldova.