Bank account validation tools (26.5%) was among the controls with the highest failure rates in enterprise fraud attacks.

The top factor cited for attackers successfully bypassing systems was human error at 46.10%.

Employee security awareness training (32.2%) was among the controls with the highest failure rates in enterprise fraud attacks.

73% of small businesses have experienced a cyber attack. 75% of those attacks occurred within the past year.

31.5% of organizations produce SBOMs due to industry regulations.

65% of organisations plan to increase cybersecurity budgets.

In the U.S., 80% of CISOs express concern over potential customer data loss via public GenAI platforms.

96.1% of organizations are integrating open source AI models into their products.

18% of companies are affected by "Shadow AI".

Despite this, 68% of CISOs believe employees understand cybersecurity best practices.

21.1% of companies lack confidence in their ability to prevent AI from introducing security vulnerabilities.

Despite near-universal adoption of Data Loss Prevention (DLP) tools, one-third say their data remains inadequately protected.

32% of respondents believe that AI-based cybersecurity tools have the greatest impact.

67% of organisations now rank information protection and governance as a top priority.

70.8% of organizations now produce Software Bills of Materials (SBOMs).

Human error remains the top cybersecurity vulnerability in 2025, with 66% of CISOs citing people as their greatest risk.

Nearly 90% of respondents express confidence in their ability to respond to cyberattacks

64% of global CISOs say enabling GenAI tool use is a strategic priority over the next two years.

67% of organisations are implementing usage guidelines for GenAI.

Enthusiasm for AI-powered defenses has dipped from last year’s high of 87%.