Q4 2025 automotive vulnerabilities span 64 unique CWEs

56% worry they remain exposed to known vulnerabilities, even as 86% say remediation is a critical part of their security strategy.

Organizations with over 5,000 employees manage almost 35 times more external assets than small enterprises with 51–250 employees.

71% of organizations suffered at least one identity-related breach in the past year.

Capital goods organisations experienced 1,192 ransomware attacks in the 12 months from March 2025.

56% of organizations remain concerned they are still exposed to known vulnerabilities that have not yet been remediated in their environments.

38% of publicly disclosed ransomware incidents were not attributed to any known group in Q1 2026.

100% of organizations grant security or compliance exceptions to allow high-risk digital work to proceed; 63% grant exceptions formally and 33.5% use informal workarounds.

Ultra-Fast Wireless Charging hack drew 76%+ of the power intended for a legitimate EV from inductive chargers

33% of law firm decision-makers cite IT budget and roadmap issues as their top challenge.

44% of organizations test their security biannually or less, or not at all.

Deployment of AI tools initially reduces performance by 10–20% before improvements are realized through repeated testing.

The average ransom demand exceeded $1,028,214 in Q1 2026.

7% of organizations were unable to confirm whether they had been attacked at all in the past year.

96% of middle market executives express confidence in their cybersecurity posture.

39% of middle market organizations prioritize detection and response in cybersecurity investment.

Cybersecurity funding is managed by the chief technology officer in 43% of middle market firms, by the chief financial officer in 37%, and by the chief information security officer in 34%.

93% of organizations already use or plan to use AI agents for sensitive security tasks such as password resets and VPN access.

92% of organizations have AI installed on at least some local machines with access to SSH and encryption keys.

Within organizations that track AI identities, 43% authenticate and authorize AI identities using a separate system from human identities.