88% of enterprises believed AI could significantly enhance their security visibility in 2025.

82% of enterprises have unknown AI agents running in their IT infrastructure.

33% of all business email compromise in higher education is lateral.

Only 21% of enterprises have formal decommissioning processes for AI agents.

In 2025, cybercriminal groups led threat activity in North America with 52%.

70% of manufacturing organizations place remote engineers at the top of the segmentation priority list.

No organizations reported experiencing zero material business impact from AI agent-related incidents.

40% of unknown AI agents emerge in SaaS tools with built-in automation.

13% of enterprises report fully autonomous AI agent models.

38% of enterprises require human approval when AI agents exceed their scope.

24% of enterprises require actions that exceed an agent's scope to be logged.

53% of enterprises use human authorization as a primary signal for governing AI agent behavior.

79% of enterprises say context-aware controls will be important or very important in the next two years.

Only 41% of IT decision-makers have significantly changed their approach to disaster recovery planning due to accelerated AI adoption.

32% of IT decision-makers conduct monthly testing of disaster recovery plans.

LLMs have the lowest resolution rate of all application types, with just 38% of high-risk issues being fixed.

One in five organizations experienced an LLM security incident in the last year, while a further 18% are unsure and 19% preferred not to answer.

57% of C-suite executives believe their organization consistently meets remediation SLAs, yet only 15% of security practitioners agree.

33% of organizations reported significant security budget growth in the past year, while 50% saw incremental increases.

In 2025, AI enabled attackers to automate up to 80–90% of a specific nation-state espionage campaign.