Phishing (including malspam, vishing, and malvertising) was the dominant intrusion vector, accounting for approx. 60% of cases..

Comcast Business blocked 497M phishing-linked C2 attempts.

20% of education institutions reported that they haven’t experienced AI-generated phishing attempts or misinformation campaigns.

36% of education institutions responded 'Not that I know of' when asked about AI-generated phishing attempts or misinformation campaigns.

Phishing and email-based attacks dropped to 46% of all incidents in 2025, down from 52.3% in 2024.

Comcast Business detected 4.7 billion phishing attempts, which specifically targeted human error and poor credential hygiene.

30% of education institutions reported that AI-generated phishing attempts or misinformation campaigns were contained quickly.

41% of schools said they have faced phishing, misinformation and other disruptive efforts.

39% of respondents are most worried about AI-driven phishing when it comes to modern or future fraud and scams.

11% of education institutions reported that AI-generated phishing attempts or misinformation campaigns caused disruption.

27% of respondents are concerned about AI-generated phishing.

47% of IT leaders based in Australia cite managing external threats (such as phishing and spoofing) as their top security challenge.

When shown a phishing email, 54% of respondents either believed it was an authentic message written by a human or were unsure.

The percentage of respondents who could correctly recognize a phishing attempt was similar across generations: Gen Z - 45%, Millennials - 47%, Gen X and baby boomers - 46% (both groups).

70% of respondents believe phishing attempts have become more successful due to the use of AI.

78% of respondents believe phishing attempts have become more sophisticated due to the use of AI.

44% of all participants admitted to having interacted with a phishing message in the last year.

Gen Z is the most susceptible demographic to phishing, with 62% reporting engagement (e.g., clicking a link or opening an attachment) with a phishing scam in the past year.

42% of respondents of UK IT leaders cited external threats (such as phishing, spoofing, and spam) as their bigest email security challenge.

46% of US IT leaders cite managing external threats (such as phishing and spoofing) as their top security challenge.