65% of organizations use risk-based prioritization for identity attack paths.

58% of organizations use automated remediation tools for identity-related issues.

41% of organizations cite difficulty prioritizing attack paths as a challenge to operationalizing Identity APM.

Zero of the 11 large language models tested earned a passing score on the cyber defense benchmark.

Anthropic Opus 4.6 found three times more attack flags than Google Gemini 3 Flash in the benchmark.

97% of CISOs say they are confident their endpoint protection would detect attacker behavior

12% of CISOs report testing their endpoint protection detection capability within the last three months

90% of organizations increased their IT security budgets in 2026, with an average increase of 5.6%.

55.0% of consumers are not comfortable with AI agents making purchases on their behalf

46.5% of consumers do not trust any company to manage purchases for them

84% of healthcare organizations include cybersecurity requirements in procurement processes.

61% of IT leaders report a rise in cybersecurity threats linked to AI.

80% of employees expect to increase their reliance on AI within the next year.

Only 31% of IT leaders feel confident in their ability to manage cybersecurity risks linked to AI.

There were 7,831 confirmed ransomware victims globally, a 389% year-over-year increase from approximately 1,600 victims previously.

More than 40% of people who lost money to a scam on social media said it started when they ordered something they’d seen in an ad

$1.1 billion, more than half the money reported lost to scams initiated on social media, was to investment scammers.

Nearly 60% of people who reported losing money to a romance scam in 2025 said it started on a social media platform.

One in three people who reported losing money to a job or business opportunity scam in 2025 said it started on social media.

Just over four in ten businesses (43%) and around three in ten charities (28%) reported having experienced any kind of cyber security breach or attack in the last 12 months.