Malicious npm packages surged 451% year-over-year.

102% year-on-year increase in automotive vulnerabilities (Q1 2026 vs Q1 2025)

Q1 2026 automotive vulnerabilities span 77 unique CWEs

Web and Local Shell combined for 33% of Q1 2026 automotive attack vectors

63% of U.S. employees use 15 or more business applications, four percentage points above the global average.

90% believe employees are using artificial intelligence in their organization, but only 22% say AI return on investment (ROI) has met or exceeded their expectations.

Only 38% of digital trust professionals are confident in their board’s understanding of AI risks.

6% of organizations admit they do not track AI identities at all.

93% of consumers say it matters that their provider offers cyber security.

STARDUST CHOLLIMA tripled its operational tempo and deployed AI-generated recruiter personas and synthetic video conferencing environments to target fintechs across North America, Europe, and Asia.

No CISOs report the ability to recover from ransomware within a day.

59% of organizations agree they must take physical possession of an endpoint to remediate and restore the device after an incident.

Over 60% of Americans over 55 are concerned about impersonation scams.

Upskilling outperforms hiring: it provides a 7.9x advantage in business context, a 7.7x advantage in staff retention, a 7.3x advantage in team cohesion, a 5x advantage in total cost, and a 3.5x advantage in quality of work.

177,000 new malicious packages were detected across registries in the last year.

45% of security and DevOps professionals say reviewing and hardening AI-generated code is now a major time drain.

Around 60% of automotive vendors had already adopted IDS at time of Automotive Cyber Security Connectivity and SDV Week 2025 survey

56% of cybersecurity decision-makers are concerned about employees inadvertently exposing sensitive information to AI systems.

Exploited vulnerabilities rose 43% in the first three months of 2026.

20% of high-risk digital work is canceled entirely due to exposure or compliance constraints.