Of the observed bot traffic, 89% was classified as unwanted.

64% noted a direct push from the C-suite to adopt more proactive defense measures.

The second-ranked industry for VEC engagement rate was the energy/utilities sector (56%).

EMEA organisations demonstrate the lowest reporting rate for VEC, at 0.27%.

During the busy holiday shopping season in the fourth quarter of 2024, sign-up attacks jumped 309%.

Two-thirds of respondents were confused about fundamental AI definitions.

Medical identity theft victims face $13,500 in average costs and 200+ hours of resolution.

Employees in large enterprises engaged with malicious vendor messages 72% of the time after reading them, taking follow-up actions such as replying or forwarding.

The overall reporting rate for advanced text-based email threats was just 1.46%.

Attacks on the commerce industry doubled, rising from 15% of all observed attacks in Q1 2024 to 31% of all observed attacks in Q1 2025.

Attempted logins using compromised passwords averaged over 1.3 million per day in March 2025

70% of patients say they would consider switching providers after a data breach.

83% of respondents cited attacks on local or cloud storage as a top risk, ranking second only to phishing.

The last two years have seen 150% year-over-year growth in AI-related incidents, with a significant inflection point coinciding with widespread cloud adoption in the late 2010s/early 2020s and the 2022 release of ChatGPT.

Recent research from Wiz highlights 6 known vulnerabilities with the underlying AI providers themselves.

Recent research indicates that half of organizations reporting AI-related security incidents estimated losses exceeding $50 million. Using an industry-standard metric of $169 per breached record, this equates to approximately 300,000 data records per organization.

Analysis of FireTail's customer data revealed that nearly 39% of all API requests resulted in HTTP 429 (Too Many Requests) responses, suggesting potential abuse. Of these 429 responses, about 20% were linked to bot traffic.

The AI Incident Database maintained by the Responsible AI Collaborative tracks AI-related issues dating back to the 1980s, with concentrated growth from 2010 onwards.

A scan of publicly accessible GitHub repositories found that the number of OpenAPI specifications decreased from 2,879 in 2023 to 2,160 in 2025.

90% or more of generative AI usage falls into the "shadow AI" scenario, meaning it occurs without the knowledge of central IT and information security teams.