In 2025, browser privilege escalation vulnerabilities surged 183%.

38% of senior security and IT leaders at U.S. enterprises with 500+ employees have experienced an identity-related security incident with measurable financial or operational impact.

41% of senior security and IT leaders at U.S. enterprises with 500+ employees have no defensible, methodology-backed dollar estimate of their identity risk exposure.

64% of senior security and IT leaders at U.S. enterprises with 500+ employees say they have a complete, real-time picture of identity risk across their environment.

39% of senior security and IT leaders at U.S. enterprises with 500+ employees report narrowly avoiding an identity-related security incident but requiring significant unplanned remediation resources to contain it.

34% of senior security and IT leaders at U.S. enterprises with 500+ employees say their existing tools surface issues but lack the context to prioritize by business impact.

85% of senior security and IT leaders at U.S. enterprises with 500+ employees express concern that AI-accelerated vulnerability discovery is outpacing their organization's ability to prioritize and respond.

94% of senior security and IT leaders at U.S. enterprises with 500+ employees say building a more complete, financially quantified view of their identity risk posture is a top or high priority in the next 12 months.

85% of adults aged 18+ in the United States, UK, Austria, Germany, and Switzerland say it is hard to tell a scam apart from the real thing, up from 66% in 2025.

88% of adults aged 18+ in the United States, UK, Austria, Germany, and Switzerland say it is becoming harder to tell what online content is genuinely human or real.

50% of adults aged 18+ in the United States, UK, Austria, Germany, and Switzerland have experienced some form of AI fraud or scam.

Exposure to AI fraud or scams is 67% for Gen Z, 51% for Millennials, 46% for Gen X, and 30% for Boomers and older.

Exposure to AI fraud or scams is 56% in the United States, 48% in the UK, and 47% in the DACH region.

81% of adults aged 18+ in the United States, UK, Austria, Germany, and Switzerland fear someone stealing their family's likeness.

67% of adults aged 18+ in the United States, UK, Austria, Germany, and Switzerland worry about voice cloning.

74% of adults aged 18+ in the United States, UK, Austria, Germany, and Switzerland are concerned about experiencing a deepfake or other AI-generated scam.

18% of adults aged 18+ in the United States, UK, Austria, Germany, and Switzerland say it is okay to use AI to generate explicit images of someone they do not know.

32% of adults aged 18+ in the United States, UK, Austria, Germany, and Switzerland say it is okay to use AI to imitate someone's voice or appearance for personal use.

Only 11% of organizations report full AI security readiness.

Among organizations where AI significantly expanded identities requiring access, breach rates reached 43% over the past twelve months. In contrast, where AI had not materially changed access patterns, breach rates were 11% over the past twelve months.