Rapports de recherche et publications

Nous faisons progresser les connaissances en cybersécurité en fournissant des recherches et des rapports opportuns et accessibles.

Strengthening the Internet, Protecting People: 2025 Annual Report

Cybersecurity is no longer optional—it is fundamental to an Internet that underpins modern economic, social, and civic life. In 2025, threats accelerated in scale and sophistication, fueled by advances in artificial intelligence, persistent weaknesses in core infrastructure, and unequal access to basic protections. Individuals, nonprofits, small businesses, and governments were all expected to operate securely in digital environments they neither control nor fully understand. These realities reinforce a core truth that guides the Global Cyber Alliance: securing the Internet demands collective, coordinated action.

This annual report details how we translated that principle into measurable impact. From equipping individuals with practical tools to recognize scams and strengthen cyber hygiene, to supporting mission-driven organizations with targeted training and partnerships, to improving visibility into malicious activity and expanding the reach of MANRS, our work addresses both everyday risk and systemic vulnerabilities. We invite you to explore the report to see how sustained collaboration, responsible innovation, and practical action are building a more secure and resilient Internet.


Other GCA Reports

Internet Integrity Workshop II

The world relies on a secure and stable Internet, including the services and applications offered over it. As malicious actors—individual, corporate, and state— increasingly attack the Internet and any infrastructure accessible from it, there is increasing scrutiny on the reliability and resiliency of Internet services at all levels.

At the Internet Integrity Workshop II — “Measurement for Action,” a recurring theme emerged: data alone does not create change, but well-designed, transparent, and relevant measurement can align incentives, support accountability, and strengthen community-driven norms.

This report captures the key insights, debates, and next steps from the workshop. It is intended for anyone working to improve Internet integrity who wants to better understand how measurement can become a practical tool for reducing risk and building a more secure, resilient Internet.

Read More

Salt Typhoon Across the Internet

The Global Cyber Alliance’s new report, “Salt Typhoon Across the Internet: What AIDE Honeypots Reveal About a Persistent State-Linked Campaign,” uses AIDE data to demonstrate Salt Typhoon’s operational characteristics through observable attack patterns spanning 2+ years.

Salt Typhoon has been publicly attributed to actors based in China and assessed as state-sponsored; AIDE’s findings focus only on behavioral evidence and do not directly attribute the activity to Chinese authorities.

Salt Typhoon is an active, evolving campaign requiring immediate action from infrastructure operators. This report offers defensive measures that provide concrete protection against documented attack vectors.

Read More

2025 Consumer Cyber Readiness Report

Marking the beginning of Cybersecurity Awareness Month, Consumer Reports, Aspen Digital, and the Global Cyber Alliance have released the fourth annual Consumer Cyber Readiness Report. The report examines American consumer attitudes on digital privacy and security and steps they are taking to protect themselves from potential threats.

Read More

Securing the Future: The Global Cyber Alliance’s 2024 Impacts and Achievements

An overview of all we accomplished in 2024 and introduces new partners, Board members, and Ambassadors, as well as our Global Voices interview series.

Read More

GCA Internet Integrity Papers: Expanding IoT Honeypots to Include IPv6-Connected Devices

Investigates the possibility of including the IPv6 address space in honeypot operations to, among other things, stop malware at its source. We propose a way to extend ProxyPot, the Global Cyber Alliance’s proprietary honeypot technology, to detect attacks over SSH, Telnet, HTTP, and HTTPS, over both IPv4 and IPv6— a first of its kind.

Read More

Defensive Measures Against Ransomware

Implementing basic cyber hygiene leads to a significant improvement in the ability of small businesses to fend off ransomware, according to this analysis by Tidal Cyber and the Global Cyber Alliance (GCA).

Read More

Global Elections Security Report: April 2023

This report takes an in-depth look at what cybersecurity players are doing to protect the integrity of elections around the world, from fighting the spread of false information that might prevent voters from forming opinions based on accurate information to securing voter data and election results from manipulation attempts. This report offers ten recommendations to improve the cybersecurity of elections with a whole-of-society approach.

Read More

GCA Internet Integrity Papers: IoT Policy and Attack Report II

The second issue of the GCA Internet Integrity Papers series presents the results of the second phase of the IoT Policy and Attack research project, conducted jointly by the Global Cyber Alliance (GCA) and Microsoft. Based on real IoT attack data obtained from GCA’s AIDE platform and ProxyPot honeypot technology, the project focuses on providing factual evidence about the applicability and effectiveness of some of the most widespread policies, recommendations, and standards on IoT security. This report has analyzed the role that the IoT devices’ software stacks —and their known vulnerabilities— play as factors to drive targeted attacks.

Read More

UK ICO Regulatory Sandbox Final Report: Global Cyber Alliance

This report offers a summary of GCA’s participation in the Information Commissioner’s Office (ICO) Regulatory Sandbox. The ICO introduced the Regulatory Sandbox (‘Sandbox’) service to support organizations that are developing products or services that use personal data in innovative and safe ways and where such products or services deliver a potential public benefit.

Read More

GCA Internet Integrity Papers: IoT Policy and Attack Report

Based on data about real IoT attacks extracted from GCA’s AIDE platform and ProxyPot infrastructure, the project aims to provide factual evidence on the validity of the most widespread policies, recommendations, and standards on IoT security around the globe. The result of the research strongly suggests that policymakers are correct in emphasizing secured access when turning standards into policy. Strong passwords, vulnerability disclosure policies, and efficient patching should be guiding principles of any baseline strategy for IoT protection.

Read More

Measuring the Impact of DMARC's Part in Preventing Business Email Compromise

In just a few short years, GCA’s DMARC initiative resulted in more than 5,700 organizations across more than 180 countries adopting DMARC. This led to estimated financial benefits of more than $19 million USD in 2018 across a diverse array of industries and governments. Learn about the full economic benefits of GCA’s DMARC initiative in our impact report.

Read More

Measuring the Economic Value of DNS Security

When DNS is used as a security measure, aka DNS firewall, the benefits can be significant. Our research has shown that DNS firewalls could have mitigated one-third of the incidents we studied and could have prevented $10 billion in losses in those incidents. Download the report to learn more about the economic value of DNS security.

Read More

Common Good Cyber comprend également une bibliothèque de recherches et de rapports.


LATEST NEWS

SEE MORE NEWS

Abonnez-vous à notre newsletter pour rester informé des dernières actualités.

S'ABONNER