A majority of surveyed organizations report using fewer than 100 direct open-source projects or libraries in production, with the largest share (~35%) clustered between 25 and 99.

98% of global enterprises report friction between accelerating AI adoption and meeting cybersecurity priorities.

98% of global enterprises say security and data concerns have already slowed deployments, added review steps, or reduced project scope for agentic AI and autonomous systems.

77% of global enterprises report moderate slowdowns or added scrutiny for agentic AI projects.

21% of global enterprises cite significant delays or reduced project scope for agentic AI initiatives.

100% of global enterprises agree attacks targeting agentic AI workflows would be more damaging than traditional cyberattacks.

98% of codebases contain open source components.

Mean vulnerabilities per codebase increased by 107% year-over-year.

Open source component counts increased by 30% year-over-year.

68% of audited codebases contain license conflicts, a 12 percentage-point increase from 56% the previous year.

76% of organizations check AI-generated code for security risks.

54% of organizations evaluate AI-generated code for IP and license risks.

56% of organizations assess quality issues in AI-generated code.

In the second half of 2025, more than two-thirds of ransomware attacks leveraged data theft instead of encryption.

Data theft-only attacks account for 57% of all attacks in 2025.

Vendor-related losses represent 18% of total losses in Resilience's 2025 claims portfolio.

Across the META region, Internet and Financial services accounted for over 80% of phishing activity.

In 2025, phishing activity in the META region targeted internet services (52.49%), financial institutions (28.50%), and the logistics sector (11.20%).

In 2025, more than 200 cases of corporate access linked to META organizations were publicly advertised for sale.

Ransomware activity is most heavily concentrated in the GCC, which accounted for over 100 reported incidents in 2025.