Mobile application attack rates climbed 58% between 2022 and 2026, rising from 55% to 87%.

BEAST threat actor leaked 700 GB of internal data from a large Chinese automotive group in late February 2026

2024 SafePay ransomware breach at a global BPO provider exposed nearly 17,000 employees and customers of a major commercial vehicle manufacturer, disclosed in January 2026 after a 14-month notification delay

42% of cybersecurity leaders identify AI-enabled attacks as a key driver of future human-related cybersecurity risks.

Over a third of employees commonly source their own agentic AI tools when options are unavailable or restrictive.

97% of organizations claim they have certified model governance.

China remained the second largest adversary infrastructure hosting location at 13.55%, down from 17.57% the previous year.

DefenseWeaver multi-agent LLM identified 11 critical attack paths across four automotive projects in TARA testing

86% of organizations say vulnerability remediation is a critical part of their security strategy.

3.7 million of the 12.4 million records exposed in the ShinyHunters automotive marketplace breach were previously unseen in other breaches

Healthcare accounted for 72 publicly disclosed ransomware attacks (27%) in Q1 2026.

Only 34% of organizations maintain a formal AI model inventory.

Local Shell was the most frequent attack vector in Q4 2025, representing over 62% of total automotive entries

In-vehicle and Virtualization target types accounted for 95%+ of Q4 2025 automotive vulnerabilities

14 different attack methods observed in Q4 2025 automotive vulnerabilities

51% of Americans aged 35 to 44 are concerned about deepfakes.

67% percent of users are using non-corporate accounts on their corporate devices to access AI services

Kenwood DNR1007XR aftermarket head unit exposes a Linux login prompt over UART at 115200 bps via a hidden board-edge connector

Breaches with third-party involvement have increased by 60%.

Shadow AI is now the third most common non-malicious insider action detected in Verizon's data loss prevention (DLP) dataset in 2025