In enterprise networks, IT devices most commonly support PQC on TLS (8%), while specialized devices are again left behind (5.6% for IoT and IoMT, 0.8% for OT)

Ransomware attacks rose 55.1% year-over-year in the first four months of 2026 and reached an average of 171 incidents per month.

The Qilin ransomware group was linked to ransomware incidents in 26 of the 31 countries analysed.

More than half of SafePay's ransomware activity in Europe targeted German organisations.

64 European organisations were drawn into a ransomware or data extortion incident through a third party.

Professional, scientific, and technical services accounted for 17.8% of ransomware victims.

AI-driven attacks have more than doubled in frequency in the last 12 months, affecting 25% of organisations and are seen as the biggest resilience challenge over the next five years.

65% of organisations think a serious cyber attack could threaten their survival.

70% of healthcare leaders are confident in their vendors' cybersecurity posture.

If a healthcare practice's EMR goes down due to a cyberattack, loss of access to patient histories and medication lists creates malpractice liabilities in 47% of cases.

If a healthcare practice's EMR goes down due to a cyberattack, temporary or permanent practice closure occurs in 25% of cases.

62% of healthcare practices treat cybersecurity and compliance as a technical line item rather than a patient-safety priority.

More than 8 in 10 healthcare practices have gaps in their recovery plans.

61% of healthcare practices expect a fatal cyberattack within five years.

60% of healthcare leaders have self-attested to HIPAA compliance despite known, unpatched vulnerabilities.

Nearly 50% of workers who understand their organization's AI policy knowingly violate that policy by using unapproved AI tools.

Support for hybrid testing models increased by 22 percentage points to 47%.

78% of organizations experienced fully automated scanning tools missing critical vulnerabilities and returning false negatives.

77% of organizations conduct regular security assessments and pentests for AI-powered products, an increase of 11 percentage points from last year.

9% of organizations rely entirely on AI automation for testing, down from 29%, while 47% prefer a hybrid testing model.