DPRK-nexus actors drove a 51% year-over-year increase in digital asset theft in 2025.

58% of enterprise CISOs agree that a ransomware incident left endpoints inoperable.

In 2025, 27.89% of all adversary infrastructure tracked was hosted in the US, an increase from 23.63% in 2024.

The median threat actor researched or used AI assistance in 15 different documented techniques, with some Actors leveraging as many as 40 or 50.

40% higher click rates make mobile devices the new favorite target.

Only 26% of critical vulnerabilities were fully remediated by organizations in 2025, a drop from the previous year’s 38%.

The median time for full resolution of critical vulnerabilities went up to 43 days, almost two weeks more than the previous year’s 32 days.

69% of ransomware victims didn’t pay.

265 unique automotive-specific vulnerabilities identified in Q1 2026

28% increase in automotive vulnerabilities in Q1 2026 compared to Q4 2025

83% of CISOs report being confident in their businesses' ability to recover from ransomware.

42% of CISOs report legacy system patching is the second most challenging ransomware mitigation method.

In-vehicle and Backend systems accounted for more than 81% of Q1 2026 automotive vulnerability targets

PCA identified 14 unique methods of entry in the Q1 2026 automotive threat landscape

Phantom hacker scams are a concern for more than 56% of Americans aged 55 to 64 and those 65 and older.

Pwn2Own Automotive 2026 had a record 73 entries

Quarkslab's audit of EVerest open-source EV charging stack found 6 high-severity, 6 medium-severity, 5 low-severity and 3 informational issues

70% of malicious PDFs contain QR codes leading to phishing websites.

Ultra-Fast Wireless Charging hack drained 76% of EV power on the Alpitronic HYC50 commercial DC fast charger

Small organizations remediate vulnerabilities fastest, averaging 14–18 days to fix exposures.