By 2028, 70% of CISOs will use identity visibility and intelligence capabilities to shrink the IAM attack surface, reducing the risks of credential compromise.

79% of IT decision-makers state that AI-powered attacks pose a significant threat to their organization’s security.

66% of organizations report experiencing up to two cybersecurity breaches, a four-percent increase from last year.

86% of IT decision makers in Europe are concerned about the impact of cyberwarfare on their organization as a whole.

43% of respondents across Europe say that the cyberwarfare threat is imminent and that they have had to report an act of cyberwarfare to authorities.

Mexico, Brazil, and the United States accounted for 31%, 24%, and 20% of network-layer observed attack traffic, respectively.

No single function owns more than 25% of AI governance responsibility.

50% more credentials were identified in the second half of 2025 than in the first half of the year.

90% more credentials were identified in the last three months of 2025 than in the first three months

Over half of all credentials (53%) were indexed within one week of exfiltration, and 36.4% within 24 hours.

Leaks outside of the codebase are 13% more likely to be categorized as critical than secrets discovered inside the code.

66% of IT decision-makers believe organizations underestimate the resources required to defend against those AI-powered threats.

More than half (54%) of organizations report being impacted by an AI-generated or AI-led attack in the past 12 months, while 66% say their organization has experienced up to two cybersecurity breaches, up from the year before.

82% of IT decision-makers now say they’ve implemented measures to detect and counter AI-powered attacks.

71% of European IT professionals believe the cyber capabilities of nation-state 71% actors have the potential to instigate a full-scale cyberwar that could cripple critical infrastructure worldwide.

80% of consumers expect their provider to protect them from digital threats.

42% of consumers say inaccurate or misleading AI answers are their biggest concern.

12% of large U.S. companies indicate their companies have undergone a transformation.

57% of large U.S. companies have not implemented countermeasures to address generative AI security concerns.

78% of large U.S. companies state that data breaches are the greatest generative AI risk that must be addressed within the next 12 months.