18 S&P 500 companies cited third-party and vendor exposure as a cybersecurity risk tied to AI.

12 S&P 500 companies warn that new AI-specific rules will bring heightened compliance obligations and potential enforcement actions related to compliance and enforcement.

13 S&P 500 companies warn of sensitive exposure under the General Data Protection Regulation, Health Insurance Portability and Accountability Act, and California privacy laws (CCPA/CPRA) related to privacy.

6 S&P 500 companies highlight uncertainty over how courts will treat IP claims tied to AI training data or who bears liability when autonomous AI systems cause harm due to cross-cutting legal risks.

45 S&P 500 companies identified AI implementation and adoption issues as a source of reputational risk.

17 S&P 500 companies cited data breaches and unauthorized access as a cybersecurity risk tied to AI.

24 S&P 500 companies highlight risks spanning copyright disputes, trade-secret theft, and contested use of third-party data for AI model training related to intellectual property.

Six funding rounds for Security Vendors and Startups were greater than $100M in Q3 2025.

3 VPN apps still utilized a legacy version of the OpenSSL library.

25% of the VPN apps analyzed on iOS failed to include a valid privacy manifest at all.

On iOS, over 6% of VPN apps were found requesting private entitlements, which are typically restricted from third-party developers. This represented a total of 30 apps

Approximately 1% of the analyzed VPN apps were found to be vulnerable to a Man-in-the-Middle (MitM) attack.

Of those who use MFA, 83% use SMS or text-based authentication.

53% of consumers have software that prevents malware or viruses.

13% of the analyzed AI-enhanced scams used AI to generate scam bait.

For companies with $5 billion or more in revenue, 41% reported a breach costing $1 million or more.

Globally, only around 7% of scams are reported to authorities.

Just 2.6% of scams are reported to authorities in the United States.

15% of educators are Neutral in their confidence in recognizing AI-related cyber threats.

30% of contractors completed medium or high assessments that would validate their actual security posture.