The average amount stolen reached $285K, up 16% from the prior year and up significantly from $199K in 2023.

The single largest fraud loss in 2025 hit $9.7M.

IT services spending is forecast to surpass $1.87 trillion in 2026, growing 9.0% year-over-year.

Device spending is forecast to reach $856.19 billion in 2026, growing 8.2% year-over-year.

Communications services spending is forecast to reach $1.35855 trillion in 2026, growing 4.8% year-over-year.

43% of UK IT decision makers report having some governance for agentic AI but with gaps.

89% of UK IT decision makers agree that public policy and regulation should mandate open source principles such as transparency and auditability to help organisations achieve AI sovereignty.

The regional average agreement across EMEA that public policy should mandate open source principles is 77%, with France at 70% and Germany at 72%.

GreyNoise sensors observe eight distinct surges targeting Cisco before the advisory for CVE-2026-20127, with the earliest surge occurring 39 days before disclosure.

SonicWall CVE-2026-0400 experienced six surges with lead times compressing from 37 days to 3 days and peak session volume reaching 69 times the median.

Fortinet CVE-2026-24858 provides one day of warning before disclosure.

More than 80% of fraud prevention, risk, and compliance professionals report that mule activity is detected reactively rather than prevented before suspicious transactions occur.

78% of financial institutions make improving mule account detection a high or top priority over the next 12 months.

94% of organizations say well-connected data, processes, and applications are highly important to successful AI adoption.

27% of organizations say data, processes, and applications are well connected in their organization today.

65% of organizations say their structured data is somewhat or fully prepared for AI use.

19% of enterprises identify unclear code provenance as a top anticipated risk.

30% of enterprises report increased trust in AI since the previous RSA Conference.

80% of enterprises were not prepared to meet software supply chain security requirements in 2024.

46% of enterprises use AI-generated code frequently or always.