12% of organizations adopting AI point to model provenance and sourcing risk as an area where they are least prepared to address threats.

Only 63% of employees have received company-advised or mandated training in AI safety and data security.

21% of organizations cite standalone GenAI tools (like ChatGPT, Claude, and image generators such as Midjourney) as their primary Shadow AI concern.

16% of organizations identify AI agents operating with user credentials as a Shadow AI concern.

Over two-thirds of all Global 2000 companies have less than half of the recommended domain security measures implemented.

22.4% of analyzed companies use 1 certificate provider.

Three leading providers supply 89% of the DV certificates used by analyzed organizations.

31% of organizations identify data sources and embeddings as their greatest AI supply chain risk.

Optimizing cloud security is a top security convergence goal for 36% of US organizations.

21% of respondents ranked device farms as their biggest manipulation challenge currently in the gig economy.

Enhancing threat visibility is a top security convergence goal for 32% of organizations in France.

38% of organizations believe they are overly confident in their cyber incident recovery capabilities.

54% of non-managers say they use AI in their work.

1% of organizations are not sure if they have an overconfident view of their cyber incident recovery capabilities.

21% of organizations consider insufficient budget for cyber incident recovery solutions to be their biggest challenge in terms of cyber incident recovery.

62% of AI users within the global workforce use AI tools daily.

62% of AI users in healthcare and pharma engage with AI daily.

29% of respondents ranked app cloning as their biggest manipulation challenge currently in the gig economy.

Let’s Encrypt, Google ®, and Amazon ® combined account for 66% of all certificates analyzed from organizations.

2% of employees in financial services reported no training in AI tools.