More than half of organizations that generate SBOMs are not actually consuming or managing them in practice.

Organizations that get verifiable transparency data from vendors see 61.6% quicker resolution of security issues.

82% of board directors rate CISOs' reporting on regulatory trends as satisfactory or excellent.

47% of board directors rate CISOs' ability to articulate the impact of evolving threats as satisfactory or excellent.

95% of CISOs provide regular updates to the board.

35% of boards limit the CISO's security updates to committee discussions.

53% of boards indicate reporting on the impact of evolving threats needs improvement.

64% of banking executives lack visibility into total IT spending because costs are scattered among departments, vendors, and legacy systems.

51% of banking executives report a significant email-based breach in the past year.

50% of banking executives report a mobile-related breach in the past year.

45% of banking executives expect technology budgets to increase by 40% or more, with some projecting 50–80% growth.

The longest recorded DDoS attack lasted 12,388 minutes (over eight days) in the Link11 network.

Three DDoS attacks surpassed 1 Tbit/s in 2025.

The strongest DDoS attack measured 1.33 Tbit/s and exceeded 120 million packets per second.

Active DDoS attacks were observed 88% of the time, equating to 322 days per year when systems in the Link11 network are targeted.

There is greater than a 70% probability that an initial DDoS attack is followed by at least one additional attack.

54% of professional pentesters report having discovered a Zero-Day or N-Day vulnerability that had no existing public patch or advisory.

51% of professional pentesters cite the pressure to be the first to submit a finding as their primary frustration with bug bounty programs.

AI-augmented teams achieve a 3.2x higher cybersecurity challenge solve-rate ratio than human-only teams across all active participants.

AI advantage peaks at 3.89x for mid-level operators on medium-difficulty cybersecurity tasks.