When EOL is identified through breakage or compatibility failures, reliance on ELS/vendor patching rises (59.7%) while upgrades are least common (18.2%).

A majority of surveyed organizations report using fewer than 100 direct open-source projects or libraries in production, with the largest share (~35%) clustered between 25 and 99.

98% of global enterprises report friction between accelerating AI adoption and meeting cybersecurity priorities.

98% of global enterprises say security and data concerns have already slowed deployments, added review steps, or reduced project scope for agentic AI and autonomous systems.

77% of global enterprises report moderate slowdowns or added scrutiny for agentic AI projects.

21% of global enterprises cite significant delays or reduced project scope for agentic AI initiatives.

100% of global enterprises agree attacks targeting agentic AI workflows would be more damaging than traditional cyberattacks.

98% of codebases contain open source components.

Mean vulnerabilities per codebase increased by 107% year-over-year.

Open source component counts increased by 30% year-over-year.

68% of audited codebases contain license conflicts, a 12 percentage-point increase from 56% the previous year.

76% of organizations check AI-generated code for security risks.

54% of organizations evaluate AI-generated code for IP and license risks.

56% of organizations assess quality issues in AI-generated code.

In the second half of 2025, more than two-thirds of ransomware attacks leveraged data theft instead of encryption.

Data theft-only attacks account for 57% of all attacks in 2025.

Vendor-related losses represent 18% of total losses in Resilience's 2025 claims portfolio.

Across the META region, Internet and Financial services accounted for over 80% of phishing activity.

In 2025, phishing activity in the META region targeted internet services (52.49%), financial institutions (28.50%), and the logistics sector (11.20%).

In 2025, more than 200 cases of corporate access linked to META organizations were publicly advertised for sale.