47% of organizations favor automation for low-risk environments, up 22 percentage points.

60% of security professionals state they require stronger LLM testing capabilities.

42% of security professionals plan to increase human-led red team operations.

The meantime to resolve (MTTR) for AI/LLM security issues is 36 days, up from 19 days in 2025.

27% of security and IT leaders report undetermined baseline behavior enables anomalous actions to go undetected, delaying critical alerts.

Average ransom payment dropped to $2.8 million, down from $3.6 million in 2025.

83% of ransomware victims paid a ransom, up from 70% previously.

Downtime per incident averaged almost 30 hours.

85% of security and IT leaders identify security incidents, data exposures, or near misses where the root cause is an AI system.

35% of security and IT leaders identify shadow AI exposure as security incidents tied to AI systems.

31% of security and IT leaders identify agentic/API logic failures as security incidents tied to AI systems.

38% of security and IT leaders report attacker activity mirrors legitimate, authorized workflows and processes, delaying critical alerts.

The end-to-end window from private disclosure to enterprise patch-in-production can stretch 90 to 150 days.

A single ImageMagick CVE can propagate to 18+ NuGet variants via Magick.NET.

85% of developers and technology buyers agree the next phase of AI in software will focus less on generating code and more on governing it.

60% of organizations say AI coding ROI has exceeded expectations.

73% of developers and technology buyers are concerned about the maintainability of AI-generated code in their organization's codebase.

40% of IT decision-makers report security vulnerabilities appearing faster, 40% report governance getting harder, 37% report higher change volume, 35% report increased pipeline strain, and 35% report growing infrastructure drift.

Only 3% of identified servers running Dropbear – common in embedded devices – support PQC

50% of IT devices in enterprise networks use OpenSSH versions that support PQC