28% of incidents originate entirely outside repositories—in Slack, Jira, Confluence, and similar tools.

93% of CNI organisations experienced a cyber attack in the past 12 months

50% of CNI organisations said IT disruption/outage was the top impact of a cyber attack.

35% of CNI organisations now cite regulation as the primary driver of maturity.

32% of respondents from CNI organisatins cited the complexity of cloud environments as the root causes of cyber incidents.

Over 9 in 10 (92%) IT decision makers in the U.S. are concerned about the impact of cyberwarfare on their organization as a whole.

U.S. respondents (83%) were most likely to agree with the statement: “My organization has allocated sufficient budget for cybersecurity programs, including people and processes.”

DDoS attack peak volume increased from 2.2 Tbps to 12 Tbps, a sixfold increase.

Network-layer attacks accounted for 82% of all observed DDoS incidents, a 20% increase from the previous report.

93% of consumers say it's important their provider offers cyber security.

72% of large U.S. companies identify attacks on legacy data as the greatest quantum security risk.

Only 23% of large U.S. companies have implemented a solution to address Harvest Now, Decrypt Later (HNDL) quantum threats.

Only 1 in 5 enterprises reach AI maturity, where AI in cybersecurity activities is fully deployed and security risks are assessed.

43% of enterprises have adopted a risk-based strategy to govern AI systems.

By 2027, 30% of organizations will require comprehensive sovereignty of their cloud security controls to address continued geopolitical turmoil.

52% of organizations say their average ransomware payout exceeds their annual cybersecurity budget.

79% of organizations have not yet reached full AI maturity in cybersecurity.

56% of organizations report challenges in managing AI user risks, including the unintended spread of misinformation.

59% of organizations say AI makes it more difficult to comply with privacy and security regulations.

Consumers are ten times more worried about getting bad AI advice than they are about a tool's actual cyber threat risk.