In 2025, 28% of cybersecurity professionals reported having already integrated AI tools into their operations.

23% of organizations admitted to having no controls for AI prompts or outputs.

83% of organizations reported using AI in daily operations.

88% of cybersecurity professionals have experienced at least one significant cybersecurity consequence in their organizations due to a skills shortage.

69% of IT leaders globally reported lacking a formal tracking system to monitor AI adoption.

7% of organizations reported having a dedicated AI governance team.

Certificate lifetimes are set to shorten to 200 days in 2026, 100 days in 2027, and 47 days by 2029.

51.54% of the phishing infrastructure is directly hosted, while 48.46% is protected by CDN/proxy services.

67% of ransomware reports that provided the communication method indicated that threat actors communicated with their intended targets via messages sent over The Onion Router protocol.

Over the past four months, 20 distinct phishing clusters were identified based on shared infrastructure fingerprints.

In 2025, 33% of cybersecurity professionals stated their organizations do not have the resources to adequately staff their teams.

61% of IT leaders globally found unauthorized AI tools in their environments.

71% of public cloud users are the most likely to implement Confidential Computing technology, compared to 45% of hybrid/distributed cloud users.

76% of respondents reported that autonomous AI agents are the hardest systems to secure.

Canada and the United States reported the highest percentages of Confidential Computing services in full production, at 26% and 24%, respectively.

53% of IT leaders globally are highly or extremely concerned about AI security risks.

On average, a web outage caused by an expired SSL certificate can cost around $9,000 per minute.

Almost 60% of the observed indicators of compromise (IOCs) are linked with Phishing-as-a-Service (PhaaS).

Between January 2022 and December 2024, FinCEN received 7,395 BSA reports related to 4,194 ransomware incidents, totaling more than $2.1 billion in ransomware payments.

72% of cybersecurity professionals agree that reducing security personnel significantly increases the risk of a breach in their organizations.