17% of Americans aged 65 and older agree that the financial institution bears responsibility for fraud.

Midmarket organizations average 56 days to remove exposures, nearly four times slower than smaller enterprises.

67% of ransomware victims confirmed their ransomware incident stemmed from an identity attack.

Across more than 750 major cyber incidents investigated in 2025, Unit 42® found that 87% required evidence from two or more distinct sources to establish what happened.

Since 2023, the share of organizations deploying patches within six days has nearly quadrupled, rising from 15% to 59%.

Organizations experience an average 3.4% drop in stock price following a downtime event.

Attackers exploited vulnerabilities an average of seven days before public disclosure in 2025.

87% of monitored client-facing mobile applications faced attacks in 2026, up from 55% in 2022.

Mobile application attack rates progressed in a five-step trajectory of 55% → 57% → 65% → 82.7% → 87% over the five-year period from 2022 to 2026.

45.6% of employees' personal AI activity flows through enterprise tools their company is paying for.

Go To Market accounts for 17.5% of AI minutes and runs 39% of its AI activity on enterprise plans.

495 malicious AI models were identified on Hugging Face.

ShinyHunters vishing attack against an online automotive marketplace help desk exfiltrated 12.4 million user records (6.1 GB) in mid-February 2026

Q4 2025 automotive vulnerabilities mapped to 19 distinct TTPs in the Auto-ISAC Automotive Threat Matrix

Q4 2025 severity breakdown: 146 Medium, 54 High and 2 Critical automotive vulnerabilities

423 financial services organizations appeared on dedicated leak sites, marking a 27% year-over-year increase.

26% of organizations leave MySQL databases exposed to the internet.

35% of law firms cite data privacy and security as AI-related concerns.

Government entities experienced 32 publicly disclosed ransomware attacks (12%) and the technology sector experienced 28 attacks (11%) in Q1 2026.

Only 29% of organizations conduct continuous simulation testing.