44% of organizations say it’s difficult to hire for automation and AI roles.

90% of global IT and security executives reported cyberattacks in the past year.

56% of security teams report that AI has improved productivity in threat detection, investigation, and response (TDIR).

OWASP API Security Top 10–related incidents increased by 32%, revealing authentication and authorization flaws.

SaaS security is a top priority for 86% of organisations, with 76% increasing their budgets this year.

Growth in security alerts related to the MITRE security framework are up 30%

71% of executives report AI-driven productivity gains.

There were 7 trillion Layer 7 DDoS attacks targeting the high technology sector from January 2023 through December 2024, making it the most affected industry for this type of attack.

40% of respondents reported increased security costs as a consequence of a cyber attack.

22% of respondents stated concern about the loss of sensitive data due to insecure home networks.

18% of organizations are expanding hiring for roles focused on AI governance, automation oversight, and data protection.

46% of organisations are struggling to monitor non-human identities (NHIs).

30% of respondents suffered financial losses due to the need to replace devices.

43% of IT decision-makers expressed concern about unauthorised access to company data on devices.

There were 311 billion web attacks in 2024. This represents a 33% year-over-year increase in web attacks.

There were more than 230 billion web attacks targeting commerce organisations, making it the most impacted industry. This is nearly triple the number of attacks experienced by high technology (the second most attacked sector).

30% of respondents cite a lack of centralized management as their top challenge.

30% of respondents reported increased insurance costs due to repeated device theft.

55% of respondents shared that employees are adopting SaaS tools without security's involvement.

37% of respondents noted reputational damage and loss of customer confidence as a consequence of a cyber attack.