Only 51% of healthcare midmarket organizations kept headcount at pace with their digital estate, and 26% grew more slowly.

APAC recorded the second highest average number of attacks worldwide, reporting 3,040 weekly attacks per organization, a 3% increase year over year,

95% of organizations anticipate that agentic AI will displace traditional penetration testing services.

TsarBot, CopyBara, and Hook collectively targeted more than 60% of global banking and fintech apps.

More than 40% of organizations allocate less than 10% of their budgets to AI security.

82% of attacks against cyber-physical systems involve using Virtual Network Computing (VNC) protocol clients to remotely access exposed internet-facing assets.

54% of organizations acknowledge confirmed or suspected AI-related insider incidents.

91% of enterprise employees are using AI on the job.

Meta-ExternalAgent was the most impersonated agent in early 2026.

Organizations with higher cyber maturity experience 50% less financial impact per dollar of revenue when cyber incidents occur.

52% of organizations are cutting or not increasing investment in identity access management controls and zero-trust architecture.

Proofpoint, Barracuda and Mimecast accounted for 19% of email healthcare breaches in 2025.

85% of healthcare IT leaders said they suspected staff were using unauthorized AI tools.

Only 26% of healthcare IT leaders reported having visibility into staff usage of unauthorized AI tools.

Only 43% of organizations in manufacturing and critical infrastructure sectors report full audit trails of vendor sessions.

Organizations in manufacturing and critical infrastructure sectors managing 21–100 external vendors report the highest incident exposure levels.

60% of organizations generate SBOMs.

Adoption of SBOMs is 59% in larger enterprises versus nearly 32% in small organizations.

More than half of organizations that generate SBOMs are not actually consuming or managing them in practice.

Organizations that get verifiable transparency data from vendors see 61.6% quicker resolution of security issues.