Speed of software development outpacing security priorities was also a concern for 71%.

37% of executives overall report increasing boardroom engagement in resilience-related discussions.

48% report needing to get better at defending against AI-powered cyber adversaries.

Just about one-third (32%) believe their organization is prepared for deepfake attacks.

Just 5% say quantum computing is a high priority for the near future.

68.6% of clicked links involved domain spoofing.

Link usage dropped by 42% in Q1 2025 compared to Q1 2024.

Callback scams now account for nearly one in five attempts.

63% still report moderate or significant friction in getting developers to adopt security team feedback, despite increased DevSecOps collaboration.

44% of executives are expecting deepfake attacks.

41% of organizations say they are experiencing a significantly higher volume of attacks.

24 percent don’t know how their organization views quantum computing within its current technology or innovation strategy

51% of respondents say their organizations have a Cybersecurity Incident Response Plan (CSIRP) applied consistently across the entire enterprise. This is up from 46% in 2024.

49% measure success of vulnerability remediation by mean time to remediation.

Link usage accounted for 75% of phishing attempts in Q1 2024.

1 in 5 organizations take four or more days to fix critical vulnerabilities.

84% recognise the role of the AppSec leader as more important now than ever. More than 84% believe their role is more important now than it was a few years ago. This increased importance is linked to factors such as growing challenges from AI-generated code and open source software.

Among those who have encountered issues with AI-generated code, 92% reported insecure code as a concern.

Only 29% of executives surveyed say they are reluctant to implement AI tools and technologies because of cybersecurity ramifications.

76% of respondents named application security posture management (ASPM) as their top investment focus for 2025.