In one analysis, professional services had 28% of vulnerable assets across cloud, APIs, and web applications.

In one analysis, retail had 27% of vulnerable assets across cloud, APIs, and web applications.

In one analysis, telecommunications had 15% of vulnerable assets across cloud, APIs, and web applications.

In one analysis, transport had 12% of vulnerable assets across cloud, APIs, and web applications.

Nearly two-thirds (64%) of respondents ranked cloud security among their top five security priorities.

17% of respondents identified cloud security as their number one priority.

55% of respondents report cloud environments are more complex to secure than on-premises infrastructure. This represents a 4-percentage-point increase from last year.

The average number of public cloud providers per organisation has risen to 2.1.

57% of organisations use five or more encryption key managers.

Enterprises now use an average of 85 SaaS applications, contributing to security tool sprawl.

Four of the top five most targeted assets in reported attacks are cloud-based.

Over half (52%) of respondents are prioritising AI security investments over other security needs.

68% of respondents reported a rise in access-based attacks.

61% of organisations use five or more tools for data discovery, monitoring, or classification.

85% of organisations say at least 40% of their cloud data is sensitive.

Over half of cloud data is now classified as sensitive.

Only 66% of organisations have implemented multifactor authentication (MFA)

74% of transportation and logistics organizations rely on a hybrid mix of private data centres and cloud environments

35% of respondents said cost is the reason why AI workloads are in a combination of private cloud and on-premises environments.

50% of respondents said the specific needs of AI workloads are the reason why AI workloads are in a combination of private cloud and on-premises environments.