Organizations are likely to make significant investments in generative AI to defend against social engineering attacks (31%).

64% of global CISOs say enabling GenAI tool use is a strategic priority over the next two years.

In the U.S., 80% of CISOs express concern over potential customer data loss via public GenAI platforms.

67% of organisations are implementing usage guidelines for GenAI.

More than half (59%) of organisations restrict employee use of GenAI tools altogether.

Three in five CISOs (60%) worry about customer data loss via public GenAI tools.

7.95% of employees in the average enterprise used a Chinese GenAI tool.

1.8% of all sensitive prompts analysed in Q2 originated in Perplexity.

72.6% of all sensitive prompts analysed in Q2 originated in ChatGPT.

15% of Google Gemini use by employees was via personal accounts.

47.42% of sensitive employee uploads to Perplexity were from users with standard (non-enterprise) accounts.

68% of security leaders state that their boards now view the secure deployment of generative AI as a critical priority.

13.7% of all sensitive prompts analysed in Q2 originated in Microsoft Copilot.

Code leakage was the most common type of sensitive data sent to GenAI tools.

Generative AI (GenAI) was involved in 70% of real-world AI security incidents.

2.5% of all sensitive prompts analysed in Q2 originated in Claude.

5.0% of all sensitive prompts analysed in Q2 originated in Google Gemini.

Of these incidents involving Chinese GenAI tools, the exposed data types included: 32.8% involving source code, access credentials, or proprietary algorithms; 18.2% including M&A documents and investment models; 17.8% exposing PII such as customer or employee records; and 14.4% containing internal financial data.

In Q2, the average enterprise saw 23 previously unknown GenAI tools newly used by their employees.

535 separate incidents of sensitive exposure were recorded involving Chinese GenAI tools.