35% of middle market organizations prioritize broader risk management functions in cybersecurity investment.

58% of cybersecurity leaders report that AI agents are already taking actions within organizational workflows.

52% of organizations report their use of AI is unapproved or ungoverned.

86% of employees say deepfake content is so realistic that it is harder to know what to trust.

64% of employees say it is possible that they could be tricked by AI-enabled attacks.

58% of cybersecurity leaders say mistakes during everyday work have had the greatest impact on their organization’s cybersecurity in the past 12 months.

23% of middle market organizations prioritize digital identity management.

Fewer than half of organizations report full visibility into where AI agent credentials are stored.

Operations runs just 18% of its AI activity on enterprise plans.

Vulnerabilities added to CISA's Known Exploited Vulnerabilities catalog increased 43% in Q1 2026 compared with Q4 2025.

52% of scam victims lose money, more than twice the 2025 rate.

Fake invoice scams account for 20% of the scams causing the most damage.

56 malicious extensions were identified on OpenVSX.

Secrets detection is active at just 28% of organizations.

More than half of organizations cite integration complexity as their top challenge.

DPRK-nexus actors drove a 51% year-over-year increase in digital asset theft in 2025.

58% of enterprise CISOs agree that a ransomware incident left endpoints inoperable.

In 2025, 27.89% of all adversary infrastructure tracked was hosted in the US, an increase from 23.63% in 2024.

The median threat actor researched or used AI assistance in 15 different documented techniques, with some Actors leveraging as many as 40 or 50.

40% higher click rates make mobile devices the new favorite target.