74% of organizations expect their focus on AI security to increase significantly over the next two years.

78% of CISOs lack a formal strategy for handling AI identities in a zero trust security architecture in 2025.

100% of organizations plan to invest more of their budget in AI-related security initiatives in the next 12 months.

78% of U.S. CISOs expect AI to create a moderate or significant amount of new IT or security work for their teams due to AI-related security risks and vulnerabilities.

69% of healthcare IT leaders feel pressured to adopt AI faster than they can secure it.

83% of healthcare IT and compliance leaders have raised concerns about AI security.

14% of organizations using Amazon Bedrock do not explicitly block public access to at least one AI training bucket

Tenable Research found CVE-2023-38545—a critical curl vulnerability—in 30% of cloud AI workloads

5% of organizations using Amazon Bedrock have at least one overly permissive bucket

Approximately 70% of cloud AI workloads contain at least one unremediated vulnerability

77% of organizations have the overprivileged default Compute Engine service account configured in Google Vertex AI Notebooks

91% of Amazon SageMaker users have at least one notebook that, if compromised, could grant unauthorized access