95% of enterprises provide cybersecurity hygiene training.

Almost one-third of organizations report extensive AI use across most or all threat detection and incident response activities, up from 25% last year.

46% of organizations cite insufficient data management and governance as a top data challenge.

39% of organizations actively using, piloting, or exploring AI say most AI-enabled workflows still rely on separate, standalone tools.

Enterprises can track only 44% of the AI tools handling sensitive company and user data.

Only 26% of state CISOs are extremely or very confident that their state's information assets are protected from cyber threats, down from 48% in 2022.

In the last six months, use of reverse proxies to steal Microsoft 365 credentials surged by 139%.

44% of enterprises identify decision-making and approvals as a top bottleneck in workflows.

30% of organizations patch and then test to confirm that risk has been remediated

Time-to-exploit (TTE) is 24–48 hours for critical outbreaks, compared to 4.76 days previously.

Around a third of businesses (30%) conducted a risk assessment covering cyber security, in line with last year (29%).

Cyber security was considered a high priority for senior management in around seven in ten businesses (72%) and six in ten charities (60%).

27% of organisations say digital resilience plans and strategies are reviewed regularly by boards

41% of CIOs say incident response times have worsened.

30% of CIOs identify phishing as a dominant threat.

Nearly half of IT and security leaders expect agentic systems to drive the majority of attacks in the coming year.

Only 23% of IT and security leaders report full visibility into the AI agents operating in their environments.

Nearly nine in ten IT and security leaders express concern about meeting recovery objectives as agent-driven threats increase.

44% of enterprises report low or no confidence in their ability to detect AI agent-specific threats.

Ransomware victim post rates averaged approximately 150–200 per week in Q1 2026 and remained steady quarter-over-quarter and year-over-year.