40-50% of AI-generated code defaults to tightly-coupled monolithic architectures, reversing decade-long progress toward microservices.

40-50% of AI-generated code inflates coverage metrics with meaningless tests rather than validating logic.

AI-powered phishing campaigns achieve a 54% click-through rate, over four times higher than traditional phishing.

80-90% of AI-generated code creates hyper-specific, single-use solutions instead of generalizable, reusable components.

80-90% of AI-generated code rigidly follows conventional rules, missing opportunities for more innovative, improved solutions.

70-80% of AI-generated code violates code reuse principles, causing identical bugs to recur throughout codebases, requiring redundant fixes.

40-50% of AI-generated code reimplements from scratch instead of using established libraries, SDKs, or proven solutions.

80-90% of AI-generated code generates functional code for immediate prompts but never refactors or architecturally improves existing code.

Only 12% of companies globally feel very prepared to assess, manage, and recover from AI and AI governance risks in 2025, according to a recent study.

26% of companies globally report having no policies, formal training, budgets, or dedicated plans to address AI risks in 2025.

Only 15% of companies globally have a budget specifically directed at mitigating AI-related risks in 2025, which is about the same percentage as last year.

75% of companies globally report not having a dedicated plan to specifically address generative AI risks, including deepfakes and AI-driven fraud attacks in 2025.

32% of companies globally have formally trained or briefed the entire company on risks related to generative AI in 2025, up from 19% in 2024 and 17% in 2023.

42% of companies globally do not have a policy in place to govern the use of AI by employees as of 2025.

23% of companies globally have a policy against using foreign AI models such as Deepseek in 2025.

Only 17% of organizations have implemented specific security controls against AI-assisted attacks.

72% of companies globally do not have a policy for the use of generative AI by partners and suppliers as of 2025.

34% of organizations expressed concern that AI-powered attacks could significantly increase their risk exposure.

48% of organizations identified faster and more automated attack chains as the greatest threat from ransomware.

Over 40% of organizations reported using AI or automation to support threat detection and alerting in response to a ransomware incident