Tax-themed scams typically make up about 1% or less of overall scam activity, but targeted campaigns can push scam emails to 6% and scam texts to 7% in a single day.

RCE increased nearly five-fold from 2.9% in H1 to 13.6% in H2

23.34% of the global ecosystem have corporate credentials circulating on the dark web via stealer logs.

69% of respondents see AI-driven attacks as inevitable within 12 months.

Just over half of organizations now use AI for threat detection and real-time monitoring, up from 46% the prior year.

Only 21% of U.S. school districts feel most confident addressing student identity threats.

A bot attack briefly pushed identity theft rates at one major auto-lending partner to nearly 35%.

72% of financial institutions are only partially aware of which vendors use AI, and 0% feel extremely confident managing vendor AI.

34% of healthcare leaders cite insufficient internal staff or specialized security resources to implement and manage microsegmentation as a barrier.

Financial institutions using manual TPRM processes are 71% more likely to receive exam findings.

60% of CISOs engage with the full board.

40% of healthcare leaders cite concerns about disrupting clinical workflows or patient care during deployment as a barrier to implementing microsegmentation.

26 of 30 pull requests (87%) introduce at least one vulnerability.

64% of IT professionals say unified observability across all layers of the IT stack is very important to their team's success

Wireless vulnerabilities increased by a combined 60% since the start of 2024.

Wi‑Fi accounted for over 60% of disclosed wireless CVEs.

Roughly 1 in 5 of all device identification events in 2025 involved a VPN connection.

Currently, 30% of senior corporate security leaders say Advanced Persistent Threat detection is largely run with agentic AI; this rises to 62% in two years.

Among the exposed corporate credentials analyzed, 80% contain plaintext passwords.

Passwords containing 'sweet', 'cookie', 'candy', 'cake', or 'pie' appear 5.7 million times in exposed credentials.