Among small businesses already targeted, 76% say AI was used in the attack.

51% of small business owners say payment platforms are "very responsible" for preventing and protecting against fraud.

30% of enterprises name AI governance and risk management as their top AI security challenge.

Vendor email compromise accounts for 61% of all business email compromise attacks.

Healthcare organizations are being hit by cyberattacks about every 10 hours.

Medical records sell for $250 to $1,000 each on illicit markets.

99% of organizations have formal incident response plans.

63% of organizations expect to embed AI as a baseline capability in day-to-day security operations by 2027.

Claude Opus 4.6 identified exploitable RCE vulnerabilities in 3 of 5 runs.

Phishing accounts for 58% of all attacks.

Third-party liability claims jumped 70% in 2025.

40% of CIOs use explainability mechanisms for AI.

48% of CIOs maintain AI audit trails and logging.

94% of CIOs report a cybersecurity skills shortage.

62% of CIOs say employees jeopardise data security through AI use.

50% of enterprises have at least partially documented governance policies for AI agent usage.

31% of enterprises have formally adopted a governance policy for AI agent usage.

77% of cybersecurity professionals prefer AI solutions that prioritize analyst oversight and control over fully independent action.

When session volume and IP count spike simultaneously, lead time extends to 21 days.

Attempted ACH fraud value increased 52% in 2025.