20% of S&P 500 companies disclosed cybersecurity risks related to AI.

The number of industrial S&P 500 companies disclosing AI-related risks jumped from 8 in 2023 to 48 in 2025.

72% of S&P 500 companies now flag AI as a material risk in their public disclosures.

24 S&P 500 companies identified AI privacy and data protection issues as a source of reputational risk.

18 S&P 500 companies cited third-party and vendor exposure as a cybersecurity risk tied to AI.

12 S&P 500 companies warn that new AI-specific rules will bring heightened compliance obligations and potential enforcement actions related to compliance and enforcement.

13 S&P 500 companies warn of sensitive exposure under the General Data Protection Regulation, Health Insurance Portability and Accountability Act, and California privacy laws (CCPA/CPRA) related to privacy.

6 S&P 500 companies highlight uncertainty over how courts will treat IP claims tied to AI training data or who bears liability when autonomous AI systems cause harm due to cross-cutting legal risks.

45 S&P 500 companies identified AI implementation and adoption issues as a source of reputational risk.

17 S&P 500 companies cited data breaches and unauthorized access as a cybersecurity risk tied to AI.

24 S&P 500 companies highlight risks spanning copyright disputes, trade-secret theft, and contested use of third-party data for AI model training related to intellectual property.

Six funding rounds for Security Vendors and Startups were greater than $100M in Q3 2025.

3 VPN apps still utilized a legacy version of the OpenSSL library.

25% of the VPN apps analyzed on iOS failed to include a valid privacy manifest at all.

On iOS, over 6% of VPN apps were found requesting private entitlements, which are typically restricted from third-party developers. This represented a total of 30 apps

Approximately 1% of the analyzed VPN apps were found to be vulnerable to a Man-in-the-Middle (MitM) attack.

Of those who use MFA, 83% use SMS or text-based authentication.

53% of consumers have software that prevents malware or viruses.

13% of the analyzed AI-enhanced scams used AI to generate scam bait.

For companies with $5 billion or more in revenue, 41% reported a breach costing $1 million or more.