BOSTON, Dec. 11, 2025 (GLOBE NEWSWIRE) — Rapid7, Inc. (NASDAQ: RPD), a leader in threat detection and exposure management, today released its top cybersecurity predictions for 2026 from executives Raj Samani, Sabeen Malik, and Rob Dooley during its Top Cybersecurity Predictions for 2026 webinar. Rapid7’s insights reveal the myriad impacts of geopolitical conflicts, highlight insiders as an increasing cybersecurity threat, and emphasize that contextual awareness will be vital for effective cyber defense in the year ahead.
“Cybersecurity is intelligence. It’s the ability to gather signals from the noise and respond appropriately,” said Samani, Rapid7’s chief scientist. “It begins with leveraging and utilizing actionable, unified cyber intelligence; looking for solutions that give you that unified approach and actionable outcomes that you can implement within your own environment.”
What Rapid7 thinks will happen with security in 2026
- As hostilities between countries flow over into the commercial sector, geopolitical fault lines will change the cyber battlefield. In 2026, the geopolitical scenario will see more digital attacks happening across national borders. This will make private companies in important supply chains even more likely to be used as proxy targets by state-aligned groups. These attacks will involve both third parties and nation-state actors who are spying and sabotaging the economy. This will give governments a way to deny that they are causing real-world problems.
- Organizations can employ tailored threat intelligence to keep an eye on geopolitical flashpoints, new APT tools, and changing attacker infrastructures to stay one step ahead of threats to their important infrastructure.
Insider threats will be the main cause of breaches, ranging from basic carelessness to selling access for money. - By 2026, people who want to do harm won’t always break in; they’ll be invited. Disgruntled employees and irresponsible insiders will become important ways for hackers to get in, especially as economic and cultural pressures grow. Organizations must set behavior baselines for users and roles to detect unusual access, downloads, and logins. They should also frequently examine privilege models to minimize needless access and lower the potential blast radius.
“We have some very aggressive people who are trying to take advantage of anything they can.” Malik, Rapid7’s vice president of Global Government Affairs and Public Policy, stated, “Still, people are going to see more advanced attacks that use things like AI.” “Businesses need to base their security technologies on knowing the difference between the human and computing parts of their attack surface.”
Dooley, the general manager for Rapid7’s Asia-Pacific Japan region, remarked, “One thing we didn’t predict was how fast consolidation would happen.” “Consolidation doesn’t imply you have to get everything from one vendor or platform. Real consolidation in the future will mean having an open platform that lets you collect telemetry from the tools you’ve bought and combine it with other data to give you context for making decisions.
About the webinar on the top cybersecurity predictions
The Rapid7 Top Cybersecurity Predictions webinar is hosted every December to give Rapid7 customers and the general public the expert advice and insights they need to stay ahead of the newest cybersecurity threats and trends. Each year, a group of Rapid7 executives from different parts of the world and an expert moderator get together for a webinar. British writer and consultant Philip Ingram was in charge of this year’s webinar. He has a long and high-ranking military experience in intelligence, counterintelligence, and security, as well as operational planning.
You can watch a replay of Rapid7’s Top Cybersecurity Predictions for 2026 webinar here.
About Rapid7
Rapid7, Inc. (NASDAQ: RPD) wants to make the digital world safer by making cybersecurity easier to use and more widely available. Our cutting-edge technology, cutting-edge research, and wide-ranging strategic knowledge give security professionals the tools they need to handle a modern attack surface. More than 11,000 clients around the world use Rapid7’s full range of security solutions to combine cloud risk management with threat detection and response. This helps them lower attack surfaces and get rid of threats quickly and accurately.
