Security teams remediate phishing incidents 16% faster but spend 9% more of their annual hours remediating phishing.

AI-assisted text in malicious emails doubled compared to prior years.

AI-powered defenses reduce per-incident phishing handling time by 16% (from 27.5 minutes to 23.2 minutes) and reduce cost per phishing email by 12% (from $31.32 to $27.51).

From 2024 to 2025, the number of critical vulnerabilities carried across vendors serving the financial sector increased 387%.

31.3% of IT and security professionals rate deepfake voice and video technology as "extremely impactful" among emerging threat trends.

40% of IT and security professionals expect phishing attack volume, speed, and evasiveness to worsen over the next 12 months.

84% of enterprises experienced material digital risk incidents in the past year.

Only 7% of enterprises describe their digital risk program as "leading."

53% of enterprises report manual remediation as their top cost category for digital risk.

44% of enterprises say AI-generated attacks are already indistinguishable from legitimate activity.

53% of enterprises had an executive or employee impersonated in the past year.

43% of enterprises have no capability to build a threat profile around someone actively being targeted.

Only 16% of enterprises have formal protection covering most or all employees.

Only 5% of enterprises ever trace brand impersonation back to a full campaign.

92% of organizations have experienced consequences tied to security readiness gaps.

95% of organizations have identified at least one emerging risk they believe is under-discussed internally.

47% of organizations say they would not respond to a serious security incident as quickly as they should.

Organizations with centralized security ecosystems are more than 3.5 times more likely to operate proactively rather than reactively.

Organizations with mature security programs are nearly twice as likely to spend their time proactively preparing for threats instead of reacting to incidents already underway.

44% of organizations say increased cyber risk is the top "Shadow AI" risk.