68% of employees use free-tier AI tools like ChatGPT via personal accounts.

2.67 million machines were infected by infostealer malware in H1 2025. This led to more than 204 million compromised credentials being observed.

Travel-themed messages account for 10% in phishing emails.

Legal or HR notices account for 5% in phishing emails.

75% of organisations in China reported implementing GenAI.

CrowdStrike OverWatch observed a 40% year-over-year increase in intrusions by suspected cloud-conscious China-nexus actors.

46% of organisations in the UK and Ireland cite management failing to prioritise cloud migration as a key barrier.

98% of organisations in the UK and Ireland are considering cloud moves

54% of IT leaders in the UK and Ireland lack complete visibility into their cloud spend, which makes it impossible to measure return on investment (ROI).

Hybrid cloud adoption has jumped to 68% in the UK and Ireland, an increase from 58% in 2022.

82% of organisations in the UK and Ireland say cloud modernisation efforts have contributed to a more agile culture.

Among those still relying heavily on legacy systems in the UK and Ireland, 70% believe migrating to the cloud could reduce costs.

71% of organisations in the UK and Ireland report that outdated on-prem technology is actively holding them back.

MSP (Managed Service Provider) involvement in cloud projects has risen to 40% in the UK and Ireland. This is a jump from 30% year-on-year.

Only one-third (33%) of cloud projects in the UK and Ireland deliver on every goal.

AI security incidents have doubled since 2024

Almost 4% of DNS traffic was blocked by DNSFilter, which is the highest percentage of blocked traffic on record.

53% of respondents supplement their efforts with internal testing

Between H2 2024 and H1 2025, Kaspersky detected over 6 million attacks disguised as work tools.

Attacker activity precedes the public disclosure of a new vulnerability in edge devices and its Common Vulnerabilities and Exposures (CVE) number in 80% of cases. This pre-disclosure activity can precede the CVE disclosure by up to six weeks.