21% of IT leaders say employees/human error is among the biggest security vulnerabilities in organizations

Wallarm tracked 439 AI-related CVEs in 2024.

58% of employees say it’s too easy to make errors when using email

33.5% of the API-related exploits targeted modern APIs, like RESTful and GraphQL.

21.5% of AI vulnerabilities are indirectly tied to APIs, including flaws in third-party integrations.

Kernel exploits accounted for 5.4% of the CISA KEV exploits.

30% of leaders cite changing employee behaviours/working patterns as their motivation for change in their security focus

46% of respondents felt their technical privacy team was understaffed.

Almost 8 in 10 (78%) of IT leaders agree that it is vital to empower employees with tools and processes that allow them to share data securely and compliantly

79% of UK CISOs report that the implementation of regulations has had an impact on their mental health.

42% of respondents indicated a data breach/leakage was a common privacy failure.

57% of respondents believed their board of directors adequately prioritized privacy.

74% said their organisation’s privacy strategy was aligned with organisational objectives.

70% of employees in the US say they frequently use IT policy workarounds to “get the job done” and save time or effort.

30% of employees said they would be able to focus more on the quality of their work, 28% stated they would be more productive, and another 28% mentioned they would feel trusted by their employer invested in email security technology

96% of respondents consider compliance/legal experience important in determining if a privacy candidate was qualified.

68% of respondents said that addressing privacy with documented privacy policies, procedures, and standards was mandatory.

Only 24% of IT leaders are highly confident in the current alignment of security investments with the most pressing threats facing their organization

33% of IT leaders say inbound and outbound email threats both present an equally big risk in their organization in terms of potential data loss

43% of the UK financial services industry will miss the Digital Operational Resilience Act (DORA) deadline.