38% of organizations still rely primarily on manual review for AI-generated code.

29% of security leaders identify insecure coding patterns as the leading risk introduced by AI coding assistants.

88% of executives say agent-washing has negatively affected their trust in AI broadly.

86% of enterprise leaders cite reliability, security, privacy, and accuracy as the top blockers preventing the implementation of autonomous agents.

47% of agentic AI deployments include dedicated agent-specific governance frameworks to manage risk.

Phishing consumes 36.5% of security team working hours, up from 33.5% three years ago.

50% of organizations rate phishing as a high or extreme threat, up from 33% in 2022.

62.5% of IT and security professionals say deepfake attacks are immediately disruptive.

Phishing costs $51,948 per security analyst annually, a 13.6% increase from $45,726 in 2022.

Nearly nine in ten IT professionals at scaled organizations say AI frequently helps detect or resolve issues before employees are impacted, compared with four in ten at early experimentation organizations.

Only 10% of large-scale enterprises have successfully transitioned autonomous AI agents from pilot phases into full-scale production.

29% of leaders find it materially harder to secure budget for AI projects due to market hype.

20% of IT and security professionals expect phishing to get easier to deal with in the next 12 months.

Security teams remediate phishing incidents 16% faster but spend 9% more of their annual hours remediating phishing.

AI-assisted text in malicious emails doubled compared to prior years.

AI-powered defenses reduce per-incident phishing handling time by 16% (from 27.5 minutes to 23.2 minutes) and reduce cost per phishing email by 12% (from $31.32 to $27.51).

From 2024 to 2025, the number of critical vulnerabilities carried across vendors serving the financial sector increased 387%.

31.3% of IT and security professionals rate deepfake voice and video technology as "extremely impactful" among emerging threat trends.

40% of IT and security professionals expect phishing attack volume, speed, and evasiveness to worsen over the next 12 months.

84% of enterprises experienced material digital risk incidents in the past year.