70% of vulnerabilities detected in healthcare systems were categorised as Medium and High severity issues.

Attacks using valid credentials were successful 98% of the time.

MSPs using 7+ tools report nearly double the fatigue levels.

APIs in technology & SaaS providers' environments saw a 400% spike in critical vulnerabilities.

89% of MSPs struggle with tool integration.

Logging coverage held steady at 54%.

One in four security alerts that MSPs receive prove meaningless.

Infostealer malware has tripled in prevalence.

Only 11% of MSPs report seamless integration of their security tools.

The average MSP now runs five security tools.

56% of MSPs experience alert fatigue daily or weekly.

Among MSPs managing 1,000+ clients, 100% report daily alert fatigue.

75% of MSPs experience alert fatigue at least monthly.

Only 20% of MSPs have consolidated their security solutions.

89% of MSPs must switch between separate dashboards and waste time on manual workflows.

Some MSPs report that 70% of their alerts are false alarms.

BlackByte, a ransomware strain, had a prevention effectiveness rate of just 26%.

BabLock, another ransomware strain, had a prevention effectiveness rate of 34%.

20% of MSPs who consolidate security tools report better outcomes across all metrics.

Broken Access Control accounted for 32% of high-severity findings across 4,200+ pen tests, making it the most prevalent and critical vulnerability.