Of the last million logins Push saw, 1 in 5 used a weak, breached, or reused password.

4.4% of desktop browser sessions in 2025 showed signs of tampering.

Mobile browsers make up 71% of all browser-based device identification events, yet desktop remains the primary target for sophisticated fraud.

96% of all detected automated activity on desktop devices is associated with fraudulent or abusive behavior.

3.3 billion compromised credentials and cloud tokens make identity the primary exploit vector.

Over 11.1 million machines were infected with infostealers in 2025.

77% of organizations reporting AI-driven job creation compared to 46% reporting job losses, and among those experiencing both, 69% say the net impact of AI on jobs has been positive.

Organizations report earning roughly $1.49 for every dollar invested in AI.

Nearly half (48%) of all code is now AI-generated.

When asked what IT/cybersecurity use cases are being pursued with gen AI, 61% of respondents said compliance monitoring and management.

When asked what IT/cybersecurity use cases are being pursued with gen AI, 55% of respondents said incident response and remediation recommendations.

When asked what IT/cybersecurity use cases are being pursued with gen AI, 48% of respondents said incident triage and prioritization.

94% of midmarket security leaders are confident in their ability to identify and remediate critical risks before attackers exploit them.

51% of midmarker security leaders say it would take approximately a week to assess their exposure to a critical zero-day.

Only 30% of midmarket organizations grew headcount faster than their digital estate.

36% of midmarket respondents acknowledge their security posture hasn't scaled appropriately with digital estate growth.

The dominant investment priorities for midmarket organizations are AI and automation (49%) and adding new solutions (33%).

44% of midmarket organizations have either outgrown their stack or stitched it together from point solutions that don't provide a unified view.

46% of midmarket organizations say enterprise platforms assume more staff, budget, or complexity than they can support.

Telecommunications was the third most targeted sector, averaging 2,699 weekly attacks per organization, up 6% year over year.