Four of the top five most targeted assets in reported attacks are cloud-based.

Over half (52%) of respondents are prioritising AI security investments over other security needs.

68% of respondents reported a rise in access-based attacks.

61% of organisations use five or more tools for data discovery, monitoring, or classification.

85% of organisations say at least 40% of their cloud data is sensitive.

Over half of cloud data is now classified as sensitive.

Only 66% of organisations have implemented multifactor authentication (MFA)

The average number of public cloud providers per organisation has risen to 2.1.

74% of transportation and logistics organizations rely on a hybrid mix of private data centres and cloud environments

85% of organizations have plaintext secrets embedded in their source code repositories.

35% of respondents said cost is the reason why AI workloads are in a combination of private cloud and on-premises environments.

Private cloud spending at the $10M+ per year level will increase from 43% in 2024 to 53.6% in 2025. This represents a 24% growth rate in private cloud spending for these cohorts. This compares to just 12% growth in public cloud spending for the same cohorts.

51% of respondents said compliance and regulatory demands are the reason why AI workloads are in a combination of private cloud and on-premises environments.

When migrating workloads to private clouds, the top challenges are managing apps post-migration, securing hybrid environments, and lack of technical skills or feasibility, each cited by 38% of respondents

56% of respondents said enhanced security is the reason why AI workloads are in a combination of private cloud and on-premises environments.

93% of organizations have at least one privileged service account, linked to Kubernetes adoption

AI adoption ranks among the top three reasons for private cloud use.

62% of organizations have at least one vulnerable AI package.

Nearly a third of cloud assets are neglected today.

76% of organizations have at least one public-facing asset that enables lateral movement.