Automotive and pharmaceutical sectors average 43 days to remediate exposures.

More than 50% of organizations check for unusual login attempts every three months or less.

56% of security leaders now experience cybersecurity-related downtime caused by SaaS and other third-party application issues often or very often, nearly triple the rate in 2024.

66% of ITOps and engineering leaders are prioritizing investments in automation to mitigate the risks of human error.

57% of law firms reported a mobile-related breach.

Only 8% of organizations rely exclusively on public AI services.

85% of technology leaders prioritize AI-driven security automation.

88% of organizations have faced AI-related security challenges.

98% of organizations are preparing for agentic AI.

63% of U.S. employees use 15 or more business applications, four percentage points above the global average.

Q1 2026 automotive vulnerabilities map to 25 distinct TTPs in the Auto-ISAC Automotive Threat Matrix

77 distinct CWEs mapped in Q1 2026, up from 64 in Q4 2025

58% of decision makers said that improving the overall security posture related to internal threats was a security priority over the next 12 months.

34% of decision-makers said genAI capabilities are paramount to data security today. This figure balloons to 64% as they look two years ahead.

65% of organizations globally say AI identities are fully registered, authenticated and authorized in a formal system.

6% of organizations admit they do not track AI identities at all.

56% of consumers encounter scam attempts at least monthly.

93% of consumers say it matters that their provider offers cyber security.

59% of organizations agree they must take physical possession of an endpoint to remediate and restore the device after an incident.

55% of Americans aged 25 to 34 are concerned about deepfake scams.