In 2025, 36% of AI-related KEVs involved an API attack surface.

99% of API vulnerabilities are remotely exploitable.

In 2025, 17% of 67,058 published vulnerabilities (11,053 vulnerabilities) were API-related.

72% of organizations experience at least one mobile app security incident in the past year.

Ransomware attacks against industrial organizations increased 64% year-over-year.

Organizations with comprehensive OT visibility detect and contain OT ransomware incidents in an average of 5 days, compared to the industry-wide average of 42 days.

In June 2025, BAUXITE deployed two custom wiper malware variants against Israeli targets.

The average dwell time for ransomware in OT environments is 42 days.

KAMACITE conducted sustained reconnaissance of U.S. industrial devices from March through July 2025.

25% of ICS-CERT and NVD vulnerabilities have incorrect CVSS scores.