84% of respondents cited phishing as a top risk.

Junior sales staff were among the most vulnerable roles, engaging with read VEC attacks at a rate of 86%.

The top countries of origin of attacks are the United States, Vietnam, Great Britain, Germany, and Thailand.

32% of security professionals cite difficulties in keeping up with increasing AI-related policies.

The average cost of a healthcare data breach has reached $9.8 million. This average cost is nearly twice as high as the cross-industry average of $4.45 million, according to industry reports.

The overall reporting rate for advanced text-based email threats was just 1.46%.

Commerce websites attracted the largest proportion of unwanted bot traffic at 39%.

7% of VEC engagements came from employees who had engaged with a previous attack.

37% of all observed internet traffic originated from bots.

A 48% spike in sign-up attacks occurred in the third quarter of 2024, aligning with major events like the Super Bowl and U.S. elections.

AI saves security teams an average of 12 hours per week on manual processes.

In just 12 months, attackers attempted to steal more than $300 million via VEC.

49% of manufacturers planning to use AI for cybersecurity in 2025. This is up from 40% in 2024 for using AI for cybersecurity

In El Salvador, threat actors make 20x more targeting gaming companies compared to those working as software developers.

Nearly 70% of security professionals believe AI also contributes to burnout.

The top three attack points used are account sign-up, sign-in, and account management

Five of the most targeted industries are technology, social media, gaming, retail, and fintech.

38% of respondents were unable to differentiate between machine learning and deep learning.

Employees in large enterprises engaged with malicious vendor messages 72% of the time after reading them, taking follow-up actions such as replying or forwarding.

Repeat engagement with VEC in EMEA is the highest of any region, over twice that of BEC.