79% of cybersecurity professionals say threat intelligence sharing is critical or very important for detection and response workflows.

Real-time sharing of threat intelligence across SecOps, incident response, and vulnerability management nearly doubled from 17% in 2025 to 32% in 2026.

51% of observed ransomware victims in Q1 2026 were based in the United States; the United Kingdom and Canada each accounted for 4%.

The construction industry experienced 131 ransomware victims in Q1 2026, a 44% year-over-year increase.

The Gentlemen ransomware group increased from 35 victims in Q4 2025 to 182 victims in Q1 2026.

56% of IT professionals say AI has added the responsibility of designing intelligent AI-driven workflows.

65% of IT professionals report that AI reduces manual effort.

Fewer than 40% of C-suite leaders agree that formal training is the most critical element for building AI skills.

32% of organizations have already established clearly defined governance or guardrails for AI security tools.

47% of IT professionals say AI has added the responsibility of evaluating and validating AI outputs.

61% of IT professionals report that AI provides faster root cause analysis.

42% of organizations that experienced a cyber incident report customer or constituent disruption.

41% of organizations that experienced a cyber incident report financial loss or revenue impact.

25% of organizations say shadow IT and unauthorized AI tool usage are a primary concern related to employee AI tool use and data security.

49% of organizations increased cybersecurity budgets year-over-year.

63% of senior cybersecurity decision makers anticipate boosting incident response by embedding AI across threat detection and incident response activities.

86% of private healthcare security decision makers report legal and communications challenges when responding to a cyber attack.

89% of senior cybersecurity decision makers report limited executive or board involvement in incident response readiness and decision making.

83% of organizations in crypto and decentralized finance, 79% in retail, and 76% in manufacturing experienced cyber attacks.

99% of bot traffic is unwanted or unverifiable.