19% of security professionals say regulatory compliance (including NIS2 and DORA) is the boardroom cyber priority boards ask about most.

54% of UK cybersecurity professionals consider traditional phishing emails the biggest threat to their organization

Cybersecurity professionals report 83% confidence in their organization's ability to stop email-based attacks, compared with 61% for Teams, 51% for social media, 50% for SMS/WhatsApp and 40% for Slack

13% of cybersecurity professionals report their organization never trains users on Teams, Slack, or SMS threats

8% of security professionals would trust AI to make security decisions without human approval.

The 2026 projected total of CVE disclosures is approximately 66,000, up from a February median projection of 59,427.

82% of U.S. mid-market enterprise IT leaders say AI is already in production somewhere in their organization or in widespread use.

26% of U.S. mid-market enterprise IT leaders say AI is scaled and governed enterprise-wide.

19% of U.S. mid-market enterprise IT leaders cite security, privacy and compliance as the top barrier to scaling AI.

71% of U.S. mid-market enterprise IT leaders expect AI to have the most positive impact in IT operations and service desk.

88% of U.S. mid-market enterprise IT leaders expect their organization to invest at least $100,000 in AI over the next 12 to 24 months.

56% of U.S. mid-market enterprise IT leaders expect their organization to invest at least $250,000 in AI over the next 12 to 24 months.

53% of U.S. mid-market enterprise IT leaders report having full visibility into AI tool usage.

42% of U.S. mid-market enterprise IT leaders reported a confirmed AI-related security incident or exposure in the past 12 months.

49% of U.S. mid-market enterprise IT leaders say internal efficiency and cost or time savings are the primary reason their organization is investing in AI.

42% of U.S. mid-market enterprise IT leaders report their organization has launched proactive reskilling and upskilling programs as part of AI investment.

40% of EMEA leaders name data used for AI or analytics as their top operational blind spot.

99% of enterprise decision-makers agree that data sovereignty is critical.

45% of UK organizations identify data used for AI and analytics as their biggest blind spot, the highest rate in Europe.

38% of organizations in MEA report reliance on third-party ecosystems and vendors, increasing supply-chain blind spots.