Malware hidden in public model and code repositories accounts for 35% of AI-related breaches.

93% of IT and security leaders continue to rely on open repositories for innovation.

31.2% of organizations expect AI Supply Chain Security to require the most new investment in AI security over the next 12 months.

29% of organizations identify external APIs and SaaS-embedded AI features as their greatest AI supply chain risk.

31% of organizations identify data sources and embeddings as their greatest AI supply chain risk.

27% of organizations view AI supply chain risks as spanning the entire AI supply chain from sourcing through runtime deployment.

31% of organizations are redirecting their largest security investments toward AI supply chain security over the next 12 months.

Over 31% of organizations are planning to allocate their security budgets to AI supply chain security over the next 12 months.

3% of organizations are unsure which aspect of the AI supply chain poses the greatest risk to their organization.

16% of organizations rank plugins and extensions as their greatest AI supply chain risk.

Just 9% of organizations rank orchestration layers and agents as their greatest AI supply chain risk.

Only 13% of organizations rank model sourcing and provenance as concerns regarding AI supply chain risk.

38% of organizations identify runtime as their most vulnerable phase in AI supply chain security.