86% of employees say deepfake content is so realistic that it is harder to know what to trust.

64% of employees say it is possible that they could be tricked by AI-enabled attacks.

58% of cybersecurity leaders say mistakes during everyday work have had the greatest impact on their organization’s cybersecurity in the past 12 months.

23% of middle market organizations prioritize digital identity management.

Fewer than half of organizations report full visibility into where AI agent credentials are stored.

Operations runs just 18% of its AI activity on enterprise plans.

Vulnerabilities added to CISA's Known Exploited Vulnerabilities catalog increased 43% in Q1 2026 compared with Q4 2025.

52% of scam victims lose money, more than twice the 2025 rate.

Fake invoice scams account for 20% of the scams causing the most damage.

56 malicious extensions were identified on OpenVSX.

Secrets detection is active at just 28% of organizations.

More than half of organizations cite integration complexity as their top challenge.

DPRK-nexus actors drove a 51% year-over-year increase in digital asset theft in 2025.

58% of enterprise CISOs agree that a ransomware incident left endpoints inoperable.

In 2025, 27.89% of all adversary infrastructure tracked was hosted in the US, an increase from 23.63% in 2024.

The median threat actor researched or used AI assistance in 15 different documented techniques, with some Actors leveraging as many as 40 or 50.

40% higher click rates make mobile devices the new favorite target.

Only 26% of critical vulnerabilities were fully remediated by organizations in 2025, a drop from the previous year’s 38%.

The median time for full resolution of critical vulnerabilities went up to 43 days, almost two weeks more than the previous year’s 32 days.

69% of ransomware victims didn’t pay.