83% of small businesses plan to invest in cybersecurity in the next 12 months.

Only 29% of organizations are prepared for an AI-powered attack.

Just 20% of organizations describe themselves as highly effective in defending against cyber adversaries using AI techniques.

44% of organizations are prepared for insider threats or account takeover.

31.62% of respondents said fraud crossing multiple systems was a factor in fraudsters successfully bypassing enterprise systems.

There were multiple gigapacket-per-second (Gpps) DDoS attacks in the first half of 2025.

32% of respondents said a trusted but compromised source was a factor in fraudsters successfully bypassing enterprise systems.

57% of organizations are prepared for personal information exfiltration.

70% of students have seen a deepfake in the last 6 months.

Bot-driven DDoS incidents peaked at 1,600 in March.

43% of organizations are prepared for smishing.

41% of organizations are prepared for quishing.

42% of students would trust their bank more if it used biometric identity verification instead of passwords.

40% of students believe the responsibility for stopping AI-powered fraud lies with government agencies.

A 3.12 Tbps DDoS attack occurred in the Netherlands in the first half of 2025.

The Iran-Israel conflict generated more than 15,000 DDoS attacks against Iran in June.

Attack durations for bot-driven DDoS attacks increased to an average of 18 minutes.

51% of organizations are prepared for phishing.

26.75% of enterprises that experienced losses due to fraud lost over $1 million in a single incident.

In 88% of major fraud incidents at enterprises, at least one critical control failed, often more.