The Play ransomware group accounted for 5% of disclosed ransomware attacks in 2025.

N-day vulnerabilities represent over 80% of all Known Exploited Vulnerabilities (KEVs) tracked over the past four years.

Average Time to Exploit (TTE) declines year-by-year: 745 days in 2020, 518 days in 2021, 405 days in 2022, 296 days in 2023, 115 days in 2024, and 44 days in 2025.

In 2025, 37 N-day vulnerabilities and 52 zero-day vulnerabilities specifically targeted security and perimeter software.

The United States accounted for 58% of all recorded disclosed ransomware attacks in 2025.

Security professionals are 5.5 times more likely to believe defenders will use AI as effectively as, or more effectively than, threat actors over the next 24 months.

85% of CIOs expect their compensation to be directly tied to measurable AI outcomes.

Fifty-two new ransomware groups emerged in 2025, a 9% increase compared to 2024.

Virtualization/sandbox evasion is the 4th most prevalent attacker technique.

29% of CIOs say they have repeatedly been asked to justify AI outcomes they could not fully explain.

A total of 130 different ransomware groups carried out attacks in 2025.

57% of CIOs believe their company’s survival could be at stake if the AI market contracts or an AI bubble bursts.

74% of CIOs regret at least one major AI vendor or platform selection made in the past 18 months.

81% of CIOs say CEOs will have their compensation directly tied to measurable AI outcomes.

81% of CIOs are concerned that citizen-built AI could expose sensitive company data.

Of the 65 CVEs discussed by the BlackBasta ransomware group, 54 are Known Exploited Vulnerabilities (KEVs).

82% of CIOs say employees are creating AI agents and applications faster than IT can govern them.

89% of CIOs believe uncontrolled AI access will create significant technical debt.

62% of CIOs say their CEO has directly questioned or challenged AI vendor or platform decisions they made at least once in the past year.

85% of CIOs say gaps in traceability or explainability have already delayed or stopped AI projects from reaching production.