Executables and scripts were the second most popular delivery type, making up 35% of threats in Q2 2025, a 1 percentage point growth from Q1 2025.

Malicious web browser downloads made up 23% of threats in Q2 2025, with no change compared to Q1 2025.

18% of business leaders say a Gen Z employee has leaked confidential information.

Of business leaders that said Gen Z employees leaked confidential information, 47% reported legal issues.

Of business leaders that said Gen Z employees leaked confidential information, 42% reported financial losses.

Of business leaders that said Gen Z employees leaked confidential information, only 10% said the leak resulted in no serious consequences.

30% of companies are avoiding hiring Gen Z employees.

Software accounts for roughly 30% of security budgets, making it the second-largest line item after staff and compensation.

SecOps solutions represent the largest share of software budgets at 16%.

Nearly 70% of CISOs have consolidated or are consolidating tools into integrated platforms.

72% of companies have automated basic IT operations such as security patch management

Office workers experience 2.7 security update disruptions per month.

13% of CISOs have made plans to consolidate tools into integrated platforms.

Two-thirds of security programs use Managed Security Service Providers (MSSPs).

Data recovery was triggered as the main driver of loss in 1.3% of claims, triggered with some loss impact in 17.5%, triggered with no loss impact known in 5.0%, and not triggered in 76.2%.

Vendor-driven cyber insurance claims notifications fell from 37% to 26% of all claims, representing a 30% drop.

The highest maximum number of packets transmitted per second recorded was 207,090,400 packets per second in the first half of 2025. 207 million packets per second can paralyze firewalls, servers, and entire networks within seconds.

In 17.0% of cases since 2019, breaches were first reported by external parties.

Only 38% of organizations over 20,000 employees actively pursuing CMMC 2.0 certification achieve top-tier encryption (76-100% coverage).

Average initial ransom demand (based on all cases with ransom demand) in 2019: $7.77 million.