More than 15,200 new software vulnerabilities were disclosed in Q1 2026, including nearly 3,900 classified as high risk.

Only 29% of organizations are prioritizing sovereign AI in a concrete, near-term way.

Downtime costs an organization $95 million in lost revenue annually, nearly double the level in 2024.

Quarkslab bypassed the 16-byte RH850 debug password protection using voltage fault injection

China's amended Cybersecurity Law took effect on 1 January 2026 (passed 28 October 2025) with raised penalties and extraterritorial reach

51% of middle market companies rely on staff training for responsible AI use.

The average cost of downtime for organizations is $15,000 per minute.

18% of organizations have zero governance over their IDE or MCP servers inside developers' workflows.

19% of consumers report being scammed.

More than 1 in 7 organizations expose API documentation to the internet.

48% of organizations report security concerns as the top barrier to AI adoption, up from 17% in 2024.

Financial services applications faced a 91% attack rate in 2026, the highest recorded for any vertical.

China hosted 42.3% of all tracked Cobalt Strike infrastructure, the US hosted 18.9%, and Hong Kong hosted 15.8%.

Across 2025, 7,918 victim postings were observed on ransomware group data-leak sites (DLS) across 129 distinct threat actors sourced from ransomware.

31% of breaches now start with software vulnerabilities.

48% of all breaches now involve ransomware.

96% of cybersecurity decision-makers globally cite disconnected or poorly integrated security tools as creating exploitable gaps.

PRESSURE CHOLLIMA conducted the largest financial theft ever reported: $1.46 billion in cryptocurrency via a trojanized supply chain compromise.

15% of organizations leave WordPress admin panels internet-facing.

85% of organizations agree that fragmented identity systems and tools impact or delay their ability to detect and respond to identity-related threats.