43% of internal authentication traffic still relies on NTLM, a legacy protocol frequently abused for credential replay and privilege escalation attacks.

12% of organizations maintain direct user-to-server administrative pathways, meaning a single compromised employee device can provide immediate access to high-value systems.

Roughly 80% of enterprises have deployed internal AI agents while two-thirds lack governance policies for those agents.

53% of development teams have grown total code volume by over 25%.

78% of organizations report more incidents after deploying AI-generated code in the past 12 months.

19% of organizations report no AI-generated code challenges in the past six months.

88% of organizations include vibe coding in formal production policies.

52% of development teams experience bottlenecks in manual review related to AI-generated code.

62% of technology leaders report their engineering teams often trust AI-generated code enough to ship it to production without line-by-line manual verification.

93% of organizations say AI is a trigger for reevaluating identity infrastructure.

9% of victims with any financial impact were able to resolve their cases.

78% of engineering teams routinely prompt AI tools to include specific telemetry (logs, traces, metrics) directly into generated code.

86% of organizations report an increase in the time senior staff spend fixing AI-generated code in the past 12 months.

67% of technology leaders state that AI now generates or significantly refactors between 51% and 75% of their organization's weekly code output.

53% of organizations say point-in-time penetration testing becomes outdated before results can be acted upon.

0% of victims who experienced three or more financial impacts reported a resolution.

60% of organizations expect analysts to shift from executing offensive security tasks to supervising autonomous workflows.

Fraudulent employment accounted for 40% of misuse cases for children and dependents.

14% of consumers report falling victim to a scam in the past year.

One in three highly evasive threats originated from sites classified as 'safe'.