34% of organizations expressed concern that AI-powered attacks could significantly increase their risk exposure.

75% of companies globally report not having a dedicated plan to specifically address generative AI risks, including deepfakes and AI-driven fraud attacks in 2025.

32% of companies globally have formally trained or briefed the entire company on risks related to generative AI in 2025, up from 19% in 2024 and 17% in 2023.

26% of companies globally report having no policies, formal training, budgets, or dedicated plans to address AI risks in 2025.

Only 15% of companies globally have a budget specifically directed at mitigating AI-related risks in 2025, which is about the same percentage as last year.

Only 17% of organizations have implemented specific security controls against AI-assisted attacks.

23% of companies globally have a policy against using foreign AI models such as Deepseek in 2025.

Only 12% of companies globally feel very prepared to assess, manage, and recover from AI and AI governance risks in 2025, according to a recent study.

76% of organizations agree that it is increasingly difficult to prepare for ransomware attacks as attackers use AI to adapt and evade defenses.

53% of French organizations reported concern about GenAI-enabled malware, compared to an average of 40% across geographies

87% of organizations consider AI-generated social engineering tactics more convincing than traditional methods.

In 2025, 85% of Americans expressed concern that scams are becoming harder to detect due to AI technologies.

42% of U.S. adults reported AI-generated phishing emails as a top concern regarding cybersecurity threats

84% of organizations have seen a measurable increase in phishing and/or credential theft incidents they suspect were AI-assisted

82% of organizations believe generative AI makes phishing emails more difficult to identify, even for well-trained employees.

37% of U.S. adults reported GenAI-enabled malware as a top concern regarding cybersecurity threats

57% of French organizations reported the greatest concern about AI-enabled threats, compared to an average of 45% across geographies

Over 40% of organizations reported using AI or automation to support threat detection and alerting in response to a ransomware incident

48% of organizations identified faster and more automated attack chains as the greatest threat from ransomware.

48% of organizations adopted AI-enhanced phishing detection.