SSH servers supporting PQC increased 72% from 11.5 million to over 19 million.

Nearly 90% of SSH servers remain non-PQC-capable.

40% of OpenSSH servers on the internet now support PQC by default

1 in 5 suffered a serious incident linked to AI code

76% have intervened to stop or restrict AI-driven behavior

53% of the organisations drawn into third-party ransomware or data extortion incidents traced to a single event: the August 2025 compromise of Miljödata.

93% of healthcare practices are already using AI in patient-facing and administrative workflows.

76% of healthcare practices say they are not ready for the proposed 2026 HIPAA Security Rule.

82% of security professionals report that their teams are dedicating significantly more effort into AI security initiatives.

32% of AI-related pentest findings were classified as high risk, compared to 12% of all pentest findings overall.

38% of LLM vulnerabilities were fixed while 62% remain open.

Security teams require mid-to-high levels of manual intervention for response, at 47%.

41% of security and IT leaders report attackers use encrypted channels to bypass detection, delaying critical alerts.

43% of organizations cite difficulty distinguishing AI-generated from human-written code as a top barrier to control and traceability.

67% of IT decision-makers and platform engineering leaders say development is ahead of infrastructure in AI adoption.

71% of Pioneer organizations actively enforce a formal governance policy, and 24% of Pioneer organizations report having no outstanding AI governance concerns.

Total PQC-capable SSH servers grew from 6.2% to 11.8%.

71% say AI has made security incidents harder to detect, investigate, or fix

79% are concerned about missing vulnerabilities introduced between scheduled tests

44% of security professionals say a human should always remain in the loop for security decisions.