Establishment of standardized technology stacks rose by more than 40%.

Nearly 30% more organizations now produce SBOMs to meet transparency requirements.

In some countries, over half of the population uses AI.

One study finds that 19 out of 20 popular "nudify" apps specialise in the simulated undressing of women.

40% of organizations are increasing their overall identity and security budgets to accommodate AI agents, with 34% adding a dedicated budget line and 22% reallocating funds from other security areas.

A U.S. healthcare provider faced over $40 million in account exposure related to fraudulent AI bot calls in 2025.

Live retail fraud dropped by 69% month-over-month in November 2025 while non-live fraud rises.

The Internet Watch Foundation detected 26,362% more AI videos of CSAM in 2025 compared to 2024.

76% of initial infection URLs in abalyzed phishing attacks were unique and have not appeared in other campaigns across Cofense's customer base.

Conversational attacks comprise 18% of all malicious emails.

Stolen login credentials led to the most damaging email-related healthcare breaches in 2025, exposing more than 630,000 patient records.

630,000 healthcare patient records were exposed due to stolen login credentials alone.

Approximately 17% of healthcare email breaches were the result of phishing-driven mailbox takeovers.

Less than one-fifth of total healthcare email incidents involved identity abuse via stolen credentials, yet these remained the most damaging type of attack.

Impersonation made up 82% of all BEC incidents in Q4 2025.

Malicious or impersonation GenAI sites decreased by 92% from April 2024 to April 2025.

Across much of Africa, Asia, and Latin America, estimated AI adoption rates remain below 10%.

Over 70% of organizations expect to manage dozens to hundreds of agents within the next 12 months, with 39% expecting 1–100 agents and 31% expecting 101–500 agents.

21% of organizations maintain a real-time registry or inventory of their agents.

Almost 20% of developers let AI automatically save changes to the project's main code repository without human review.