Browser exploits accounted for 9.2% of the CISA KEV exploits.

38% of respondents believed their legal/compliance privacy team was understaffed.

51% of respondents believed the demand for legal/compliance privacy roles would increase in the next year.

57% of AI-powered APIs were externally accessible, and 89% relied on insecure authentication mechanisms.

45% of leaders cite increasing threat levels with AI as their motivation for change in their security focus

22% of respondents indicated their organisation had open legal/compliance practitioner roles.

Gartner predicts spending on Data Center Systems to reach $405.505 billion in 2025, a 23.2% increase from $329.132 billion in 2024.

79% of Brits believe the Government should better regulate the use of workplace surveillance technology.

94% of respondents consider prior hands-on experience in a privacy role important in determining if a privacy candidate was qualified.

93% consider technical experience and credentials in a privacy role important in determining if a privacy candidate was qualified.

59% of employees in healthcare say they frequently use IT policy workarounds to “get the job done” and save time or effort.

When asked if they agree with the statement "My organization has blocked/is blocking access to one or several GenAI sites," 44% of organizations surveyed said they strongly agree, 42% said they agree, 6% said they neither agree nor disagree, 5% said they disagree, 2% said they strongly disagree.

Only 2% of organizations implemented DMARC, SPF, and STARTTLS together for their email security.

10% saw a decrease in their privacy budget in the past 12 months.

48% perform a privacy impact assessment to monitor their privacy programs.

22% of respondents currently use AI for privacy-related tasks.

In Q4 2024, there was the highest jump of the year with 13 new ransomware groups emerging.

52% of CISOs consider innovating with emerging technologies a priority, compared to 33% of board members.

The percentage of data policy violations in organizations due to personal AI app usage is as follows: Regulated Data (60%), Intellectual Property (16%), Source Code (13%), Passwords and Keys (11%), and Encrypted Data (1%).

While 64% of employees report receiving training on email security, more than a third in large organizations find it ineffective or are dissatisfied with how training is delivered