AI-assisted exploit development compressed the average time from vulnerability disclosure to a working exploit from 125.3 days in January 2025 to 0.5 days by April 2026.

24% of organizations say they have no AI-specific access controls

91% of U.S. organizations indicate that AI will strengthen their security posture.

47% of large organizations do not have full visibility into employee AI tool usage.

30% of executives and board members believe AI has increased cyber risk significantly.

The median threat actor researched or used AI assistance in 15 different documented techniques, with some Actors leveraging as many as 40 or 50.

Less than 2.5% of the AI-assisted malware observations involved less- common techniques with one or fewer known malware examples.

78% of organizations run AI inference themselves.

45% of IT leaders believe AI has increased cyber risk significantly.

Only 9% of U.S. organizations report being ready to deploy AI-powered security today.

43% of consumers say they would use AI for cyber security help.

90% believe employees are using artificial intelligence in their organization, but only 22% say AI return on investment (ROI) has met or exceeded their expectations.

There is an 82-percentage-point gap between AI belief (91%) and AI deployment readiness (9%) in the U.S.

Organizations spend a median of $24.5 million annually on AI tools that prevent and respond to downtime.

51% of middle market companies rely on staff training for responsible AI use.

Only 40% of organizations have a formal AI governance framework in place.

One in three large organizations lack a formal AI governance framework.

77% of organizations report that inference is their dominant AI activity.

35% of law firms cite data privacy and security as AI-related concerns.

All technology leaders report their organization has experienced some form of AI-related downtime.