46% of organizations say improving attack path visibility and privilege relationships is a top cybersecurity priority over the next 12 months.

43% of organizations rank attack path visibility among their top three cybersecurity priorities.

37% of organizations cite bandwidth and team overwhelm as a barrier to operationalizing Identity APM.

Total ACH payment value increased 11%, creating a nearly 5-to-1 divergence.

A single low-cost device model drove 3% of all mobile account takeover attempts.

19% of enterprises identify shadow AI outside approved tools as a top anticipated risk.

Phishing and transfer fraud accounted for roughly 30% of all manufacturing claims.

30% of organizations patch and then test to confirm that risk has been remediated

The average transfer fraud event costs roughly ten times more than the average email compromise in manufacturing claims.

Remote monitoring and management (RMM) tool abuse accounted for 26% of all detections in monitored SMB environments.

64% of organizations experienced a ransomware attack in the past year.

Among organizations victimized by ransomware, the share that paid a ransom increased from 41% to 55%.

Among organizations that paid ransoms, 61% successfully recovered their data, up from 54% the previous year.

62% of healthcare and manufacturing security leaders say today's microsegmentation solutions are easier to deploy than those from five years ago.

53% of organizations have a board member involved in or leading a cyber risk assessment committee.

Among IT security professionals who expect AI to reduce required headcount, 46% expect this shift to occur within the next two years.

74% of healthcare organizations identify visiting clinicians as requiring the most granular policy attention.

Only 9% of healthcare and manufacturing organizations have protected more than 80% of their critical systems.

97% of IT security hiring managers are actively seeking candidates with at least one AI-related skill.

73.9% of consumers expect strong safeguards such as biometric or one-time password authentication for every transaction