87% of security leaders express confidence that their cybersecurity investments are delivering business value.

32 million phishing emails were detected globally in 2025.

Nearly 70% of incidents in the Americas began with stolen or misused accounts.

Seed investment volume in Q4 2025 increases 41% compared to the post-pandemic lows observed in Q4 2024.

Services companies account for more than 15% of deals in Q4 2025.

41.67% of CentOS users report purchasing or planning to purchase extended support.

92.6% of open-source users reported that their organization was aware it was vulnerable before the cybersecurity incident occurred.

Three in four small- and medium-sized businesses say cyber incidents, including data breaches and ransomware attacks, are most likely to negatively impact their business this year.

47.2% of SMBs say lack of skills is the key hurdle to resolving security vulnerabilities and incidents.

In 2025, 36% of AI-related KEVs involved an API attack surface.

The average dwell time for ransomware in OT environments is 42 days.

25% of ICS-CERT and NVD vulnerabilities have incorrect CVSS scores.

In the second half of 2025, 40% of all ransomware attacks targeted US-based companies.

58% of CISOs say AI is influencing their security stack consolidation strategy.

11% of CISOs are consolidating their security stack for reasons unrelated to AI.

58% of internal audit leaders view AI-enabled fraud as a moderate risk.

40% of internal audit functions support awareness or training initiatives related to AI-enabled fraud.

88% of internal audit leaders identify AI-powered phishing attacks as a top risk.

43% of internal audit leaders cite competing organizational priorities as a barrier to AI-specific risk management efforts.

55% of internal audit leaders identify insufficient staff with relevant skills or expertise as a primary barrier to improving AI-enabled fraud preparedness.