AI can automate 70% of all incident investigations and threat remediation activity.

86% of security alerts escalate into tickets, which indicates that most alerts still require human validation.

In January 2025, Skyhigh Security recorded DeepSeek usage by 43% of customers.

Business and professional services (11.1%) was the 2nd most targeted industry.

Ransomware cases globally dipped by 32% in March (600 attacks) compared to February.

91% of respondents believed their employee training initiatives were successful.

"More than half" of the organizations surveyed confirmed they regularly experienced malware and phishing incidents.

94% of all AI services are at risk for at least one of the top Large Language Model (LLM) risk vectors, including prompt injection/jailbreak, malware generation, toxicity, and bias.

Data uploaded to AI applications is up 80%.

83% of AI applications don’t support integration with multi-factor authentication (MFA) tools

Prompts specifying a need for security or requesting OWASP best practices produced more secure results, yet still yielded some code vulnerabilities for 5 out of the 7 LLMs tested.

When prompted to generate secure code, GPT-4o still produced insecure outputs vulnerable to 8 out of 10 issues.

Global median dwell time was 10 days when organizations discovered malicious activity internally

Babuk2 was the most active threat group, responsible for 14% of all attacks in March. Babuk2 drove ransomware activity with 84 attacks in March. This represents a 37% increase for Babuk2 from January (61 attacks).

South America took fourth place with 7% of attacks (39 attacks) in March.

North America remained the most targeted region in March. North America accounted for 48% of total global attacks and experienced 290 attacks.

The Global median dwell time rose to 11 days in 2024, up from 10 days in 2023.

Some open security issues in Agentic AI are lingering for 1,200-plus days.

68% of organizations surveyed have experienced data leakage incidents specifically related to employees sharing sensitive information with AI tools.

Enterprises use a staggering 320 AI cloud applications on average.