Threat research
Prepare for today's changing threat landscape
Understand threat actors' targets and attack behaviors with the 2025 Elastic Global Threat Report — designed to provide your cybersecurity team with crucial insights for the upcoming year.
Looking for more?
Check out other assets from the 2025 Elastic Global Threat Report:
Webinar
Discovering today's threat landscape: The 2025 Elastic Global Threat Report
Video
Watch Elastic CISO Mandy Andress break down the latest Global Threat Report (GTR) recommendations to help CISOs and their teams strengthen your defenses.
Threat research for everyone
Our team of veteran security researchers, Elastic Security Labs, regularly publishes long-form reports on topics of all kinds, including:
Explore how we create, maintain, and assess the SIEM and EDR rulesets for our award winning security solution!
Targets. Techniques. Forecasts. How are adversaries attacking organizations, and what can security teams expect?
Explore LLM implementation risks, the top 10 most common attacks, and how to mitigate them, all with this report.
Frequently asked questions
What is the Elastic Global Threat Report?
What is the Elastic Global Threat Report?
The Elastic Global Threat Report is a report from Elastic Security Labs that explores a full year of security telemetry. The Global Threat Report provides a comprehensive look at several threat topics, including malware, cloud, endpoint, and adversarial campaigns.
Where does Elastic get the threat data from?
Where does Elastic get the threat data from?
The telemetry analyzed for the Global Threat Report comes from both public data and Elastic's private data, as well as voluntary user and customer sources.
What months make up the Global Threat Report?
What months make up the Global Threat Report?
The 2025 Elastic Global Threat Report analyzed data from June 2024 to July 2025 and was published on October 8, 2025.
Where can I find previous reports?
Where can I find previous reports?
All previous iterations of the Global Threat Report can be found in the Report section of the Elastic Security Labs site.
What threat research does Elastic do?
What threat research does Elastic do?
In addition to our various long-form publications, Elastic Security Labs regularly publishes in-depth articles on threat research, detection engineering, generative AI, and more! Check out the library.
Explore Elastic Security
Empower your SOC
Resist advancing threats with AI-driven security analytics, the future of SIEM.
Work smarter with AI
Detect sooner, investigate faster, and respond before threats have a chance with the Search AI Platform.
Fueled by Elastic Security Labs
Explore detailed security research on threats, malware, protections, and more from our experts.