In September 2025, Qilin's compromise of a single South Korean MSP affected 32 financial institutions and resulted in over 2 terabytes of stolen data.

Qilin was responsible for 59 finance-sector incidents in the past year.

From 2024 to 2025, the number of critical vulnerabilities carried across vendors serving the financial sector increased 387%.

15% of security leaders cite misalignment with internal security policies as a major concern with AI-generated code.

90% of security leaders have active concerns about security risks introduced by AI-generated code.

38% of organizations still rely primarily on manual review for AI-generated code.

29% of security leaders identify insecure coding patterns as the leading risk introduced by AI coding assistants.

88% of executives say agent-washing has negatively affected their trust in AI broadly.

86% of enterprise leaders cite reliability, security, privacy, and accuracy as the top blockers preventing the implementation of autonomous agents.

47% of agentic AI deployments include dedicated agent-specific governance frameworks to manage risk.

Phishing consumes 36.5% of security team working hours, up from 33.5% three years ago.

50% of organizations rate phishing as a high or extreme threat, up from 33% in 2022.

62.5% of IT and security professionals say deepfake attacks are immediately disruptive.

Phishing costs $51,948 per security analyst annually, a 13.6% increase from $45,726 in 2022.

Nearly nine in ten IT professionals at scaled organizations say AI frequently helps detect or resolve issues before employees are impacted, compared with four in ten at early experimentation organizations.

Only 10% of large-scale enterprises have successfully transitioned autonomous AI agents from pilot phases into full-scale production.

20% of IT and security professionals expect phishing to get easier to deal with in the next 12 months.

Security teams remediate phishing incidents 16% faster but spend 9% more of their annual hours remediating phishing.

AI-assisted text in malicious emails doubled compared to prior years.

AI-powered defenses reduce per-incident phishing handling time by 16% (from 27.5 minutes to 23.2 minutes) and reduce cost per phishing email by 12% (from $31.32 to $27.51).