64 European organisations were drawn into a ransomware or data extortion incident through a third party.

Professional, scientific, and technical services accounted for 17.8% of ransomware victims.

AI-driven attacks have more than doubled in frequency in the last 12 months, affecting 25% of organisations and are seen as the biggest resilience challenge over the next five years.

65% of organisations think a serious cyber attack could threaten their survival.

70% of healthcare leaders are confident in their vendors' cybersecurity posture.

If a healthcare practice's EMR goes down due to a cyberattack, loss of access to patient histories and medication lists creates malpractice liabilities in 47% of cases.

If a healthcare practice's EMR goes down due to a cyberattack, temporary or permanent practice closure occurs in 25% of cases.

62% of healthcare practices treat cybersecurity and compliance as a technical line item rather than a patient-safety priority.

More than 8 in 10 healthcare practices have gaps in their recovery plans.

61% of healthcare practices expect a fatal cyberattack within five years.

60% of healthcare leaders have self-attested to HIPAA compliance despite known, unpatched vulnerabilities.

Nearly 50% of workers who understand their organization's AI policy knowingly violate that policy by using unapproved AI tools.

Support for hybrid testing models increased by 22 percentage points to 47%.

78% of organizations experienced fully automated scanning tools missing critical vulnerabilities and returning false negatives.

77% of organizations conduct regular security assessments and pentests for AI-powered products, an increase of 11 percentage points from last year.

9% of organizations rely entirely on AI automation for testing, down from 29%, while 47% prefer a hybrid testing model.

Among organizations with confirmed AI-related security incidents, Shadow AI contributed to 44% of incidents, data or model poisoning 41%, improper output handling 41%, supply chain vulnerabilities 35%, and prompt injection 34%.

30% of security and IT leaders report alert fatigue causes initial detections to be deprioritized, delaying critical alerts.

Security teams require mid-to-high levels of manual intervention for detection, at 42%.

Security teams require mid-to-high levels of manual intervention for alert triage, at 43%.