Spaghetti Scenarios · Global risk
A coordinated cyberattack simultaneously paralyzes the systems daily life depends on: electricity, banks, communications, transportation. Its effect resembles that of a solar storm, but its origin is human and deliberate, and it is fought differently: with cyber defense, networks separated from each other and cooperation between countries.
A single faulty update crashed 8.5 million computers in one day. The networks that sustain water, energy and communications already have intruders lying in wait.
Attacks on critical infrastructure
62%
of the AI-driven attacks in the 2026 study targeted critical infrastructure, mainly finance and energy. State-backed groups kept hidden access to water, energy and transportation networks for at least five years.
▼ Ransomware complaints against U.S. critical infrastructure: 870 in 2022, 1,193 in 2023 and +9% in 2024
Service recovery time
247 days
is how long it takes a company, on average, to identify and contain a breach, including restoring services (2026 report). Full recovery usually takes more than 100 days.
▼ Rose for the first time after five years of decline (241 days in 2025)
Dependence on single providers
8.5 million
Windows computers crashed on July 19, 2024 because of a single faulty update from a security vendor. Three companies hold 63% of the world's cloud.
International cybersecurity agreements
3 of 40
ratifications needed for the first UN convention against cybercrime, adopted in December 2024, to enter into force. It has 95 signatures, including the European Union.
▲ From 72 signatures in Hanoi (October 2025) to 95
Attacks and failures that spread beyond their target, and the international response.
Average days to identify and contain a data breach, including restoring services, by report year. It fell for several years and rose again in 2026.
Each report studies breaches from the previous 12 months (March to February).
Millions of dollars paid each year to groups that encrypt their victims' data and demand a ransom (only tracked cryptocurrency payments).
Payments fell in 2025, but claimed attacks rose 50%. The 2025 figure may grow as more payments are identified.
Share of the global cloud infrastructure market (second quarter of 2026). Three companies hold almost two thirds.
Other = 100 − 63.
It needs 40 ratifications to enter into force. The white line marks that goal.