45% of SMBs cite employee negligence as their biggest cybersecurity concern, particularly acute in the education sector.

13% of SMBs rely on untrained employees to handle alerts.

38% of New Yorkers reported they have already stopped using a service because they did not trust it to protect their data.

Adware levels nearly doubled from the December to May period to the June to November timeframe in 2025, with a 27% increase observed from August through November.

41% of SMBs have endpoint protection.

49% of organizations using at least three compliance controls remediate critical vulnerabilities within a day.

In Q3 2025, SMS toll fraud targeting the fintech sector grew by 97%, alongside a major spike in human fraud farm activity.

27% of SMBs lack cyber insurance.

Security vulnerabilities in AI-generated code increase by 1.5 to 2 times, particularly in areas such as improper password handling and insecure object references.

Organizations classified as 'Exceptional' in AppSec maturity are 3.6 times more likely to achieve a 20% or greater improvement in developer productivity compared to those in the 'Evolving' category.

Half of school IT leaders view ransomware as a serious threat to learning continuity in 2025

3% of SMB owners faced severe, lasting damage following a cyber attack.

26% of SMBs do not conduct regular penetration tests or security assessments.

42% of SMBs are worried about outdated technologies, with healthcare businesses the most concerned.

Logic and correctness issues increase by 75% in AI-generated code, including business logic errors, misconfigurations, and unsafe control flow.

49% of New Yorkers avoid accessing sensitive information like banking accounts and email when on public WiFi.

The leading motivations for working with a managed service provider (MSP) for SMBs are a fear of cyberattacks (52%) and a sense of responsibility to customers and stakeholders (40%).

43.3% of healthcare email breaches involved Microsoft 365.

IT leaders estimate only 5% of known phishing attacks are reported by healthcare employees to their security teams.

There was a 264% increased surge of ransomware attacks on healthcare organizations.