Business services was the most targeted sector, accounting for 37% of ransomware victims, followed by consumer goods & services (13%) and industrial manufacturing (9%).

Initial access by threat actors using misconfiguration, which accounted for 29.4% of incidents in the first half of 2025, dropped to 21% in H2 2025.

26 of 30 pull requests (87%) introduce at least one vulnerability.

31% of users have the power to modify or delete sensitive data.

Exposed sensitive UI or APIs fell from 11.8% in H1 to 4.9% in H2.

47% of IT professionals cite security concerns as a barrier to fully operationalizing AI in observability

Threat actors exploited identity issues to gain initial access in 83% of the incidents involving major cloud and SaaS-hosted environments.

Threat actors targeted data in 73% of cloud-related incidents.

85% of senior corporate security leaders using AI in cybersecurity say their current cybersecurity budget is insufficient to meet AI-enabled threats.

Currently, 9% of organizations dedicate at least 25% of their total cybersecurity budget to AI solutions; this share is expected to rise to 48% in two years.

25% of security leaders trust Endpoint Detection and Response (EDR) to defend against evolving ransomware threats.

Currently, 27% of senior corporate security leaders say data privacy and compliance is largely run with agentic AI; this rises to 48% in two years.

56% of consumers say they have fallen victim to an online shopping scam.

92% of Gen Z consumers say they are familiar with e-commerce scams, compared with 82% of Baby Boomer consumers.

North America accounted for 57% of reported ransomware incidents, followed by Europe (17%) and APAC (17%)

73% of organizations report internal conflict over ownership of AI security controls.

RCE increased nearly five-fold from 2.9% in H1 to 13.6% in H2

Nearly half of the active malware families have financial extortion capabilities, including ransomware that can encrypt files on the device.

Corporate workers leave 96% of their granted application permissions dormant.

57% of organizations say AI frees analyst bandwidth for higher-priority work.