24% of leaders at organisation across the UAE & KSA admit that AI usage within their perimeter is entirely unapproved or lacks formal corporate governance.

Across the UAE & KSA, 52% of cybersecurity decision- makers report that the unsanctioned use of external software and rogue AI applications has directly degraded or actively compromised their security posture over the past 12 months.

44% of the UAE & KSA employees confess that intense time constraints, cognitive overload, and everyday workplace distractions directly drive them to cut corners and make critical security errors, even when they are fully aware of safe protocols.

One in four small to medium enterprise owners in Australia said their business was negatively impacted by cybercrime in the last 12 months.

15.9% of Australian SME owner or managers said they lost business information

14.1% of Australian SME owner or managers said cybercrime harmed their reputation or revenue

Financial losses totalling around £270,000 were reported by UK organisations that experienced ransomware last year, a 50 per cent increase compared to previous year.

Of the UK ransomware reports made (323) where the sector of the organisation was listed, the manufacturing industry (42 reports), scientific and technical sector (21 reports) and education sector (19 reports) have all been impacted.

42.6% of all critical exposures are vulnerabilities, more than double the 18.7% recorded the year before.

Utilities resolve 30% of critical exposures within one hour.

67% of suppliers are used by five or fewer higher education institutions.

47.7% of organizations report dependency changes introduced by AI-generated code are hard to catch week-to-week.

48.8% of IT and security professionals in the U.S. report marked gaps in visibility compared to the overall average of 33.8%.

64% of IT and security professionals in Singapore and 61.6% in the U.S. view agentic AI expanding the attack surface as a regional flashpoint.

Security teams spend 42% of their time investigating risks that later prove low priority or non-exploitable.

Organizations outside North America are roughly 20 percentage points behind North America on both consolidated cyber risk visibility and continuous automated validation.

Germany leads surveyed countries with 58% adoption of automated validation.

88% of security teams acknowledge that periodic assessments cannot keep pace with the speed of change in their environments.

89% say reducing alert noise would help identify which alerts represent real business risk.

88% of security teams agree that without greater automation, they cannot keep up with the volume of risks they must assess.