More than half (52.2%) of the domains analysed in the report still lack even a basic DMARC record.

Over 96% of manufacturing respondents have plans to incorporate AI into remote access security.

37% of organizations are utilizing over 50 cybersecurity tools.

58% of CISOs and cybersecurity executives say it is difficult to articulate their value beyond risk mitigation.

Only 43% of cybersecurity functions are meaningfully involved in helping other functions adopt AI.

73% of the study's cohort of "Secure Creators" (organizations with more advanced cybersecurity functions than their peers) believe their ability to add value will grow in the future.

23% of study respondents completed a technology rationalization effort in the last two years.

Almost half (48%) of security professionals are falling behind global SBOM compliance regulations.

GPT4 can write exploits for 87% of known vulnerabilities.

56% of decision-makers at financial institutions named false positives as the leading pain point in fraud operations.

Cybersecurity contributes 11% to 20% in value to each enterprise-wide strategic initiative it is involved in.

41% of respondents are undertaking a technology rationalization effort.

75% of financial institutions say fraudsters outpace defenders with generative AI.

26% of security professionals said AI code generation and vibe coding risks were the most pressing or high-stakes issue AI creates for organizations today.

96% of tech professionals view AI agents as a growing security risk.

72% of respondents state AI agents pose a greater risk than machine identities.

60% of respondents say AI agent's ability to access privileged data is a factor contributing to AI agents as a security risk.

68.8% of decision-makers at financial institutions rank first-party fraud as their second-greatest challenge.

Only 13% of CISOs in the study said they were consulted early when urgent strategic decisions were being made.

41% of respondents are in the process of simplifying their tech platform.