Organizations with over-privileged AI systems have a 76% incident rate, compared to a 17% incident rate for organizations that limit AI to only the privileges needed for the task.

70% of security leaders say AI systems have more access than a human in the same role.

85% of security leaders are concerned about AI-related infrastructure risk.

48% of security teams report blind spots around prompt injection chains or tool-chaining abuse in AI-native applications.

69% of security leaders agree identity management must fundamentally change to support AI safely.

43% of organizations say AI makes infrastructure changes without human oversight at least monthly.

59% of security leaders report having experienced or strongly suspect an AI-related security incident.

Enterprises deploying AI systems with excessive permissions experience 4.5x more security incidents than enterprises that enforce least-privilege controls.

MCP vulnerabilities grew 270% from Q2 to Q3 in 2025.

Teams using attack intelligence to track emerging AI vulnerabilities increased by 10%.

Use of risk-ranking methods to determine where LLM-generated code is safe to deploy increased by 12%.

Application of custom rules to automated code review tools to catch issues unique to AI-generated code increased by 10%.

In 2025, an AI agent placed in the top 5% of teams in a major cybersecurity competition.

Only 21% of enterprises report full visibility into agent actions, MCPs tool invocations, or data access.

65% of enterprises consider action-level guardrails and runtime controls to be a critical priority for AI agents.

AI applications experienced a 43% increase in security incidents over the past 12 months, marking the second-largest increase across all channels.

30% of businesses reported that they use AI and must now protect it like any other critical system.

76% of respondents reported that autonomous AI agents are the hardest systems to secure.

53% of IT leaders globally are highly or extremely concerned about AI security risks.

68% of organizations invested in AI-powered protection capabilities in 2025