Over 80% of security teams at enterprises lack full visibility into the applications and AI agents created by business users.

Enterprises can track only 44% of the AI tools handling sensitive company and user data.

More than 50% of CISOs at enterprises agree that business users are building applications that support business-critical processes.

90% of security leaders at enterprises expect to implement governance policies for citizen development by the end of 2026.

49% of state CISOs name implementing effectiveness metrics as a top cybersecurity initiative, up from 25% in 2024 and 15% in 2022.

75% of organizations report increased identity security spending.

Roughly one-fifth of CISOs indicate their states are moving toward a "whole-of-state" approach to cybersecurity.

In the last six months, calendar invite phishing increased by 49%.

71% of small business owners expect AI to make fraud more prevalent.

Internal team impersonation was present in 30% of phishing attacks by threat actors in Q1 2026.

In the last six months, 86% of phishing attacks were AI-driven.

87% of enterprises have deployed AI and automation in security operations simultaneously.

92% of IT and cybersecurity decision-makers at enterprises say automation has met or exceeded operational expectations in security operations.

52% of C-suite leaders at enterprises report that AI exceeded expectations.

17% of managers at enterrpises report that AI exceeded expectations.

78% of IT and cybersecurity decision-makers at enterprises say AI delivers greater financial return than automation.

Only 32% of enterprises apply AI and automation to clearly different tasks based on their distinct strengths.

44% of healthcare organizations use medical devices with known, unpatched vulnerabilities.

28% of healthcare organizations operate medical devices past end-of-support.

In 2025, bots made up more than 53% of all web traffic, up from 51% the previous year, while human activity fell to 47%.