30% of Canadians rank good fraud protection as one of the top three considerations when selecting a new account, while 71% rank it in their top three overall.

4.4% of KEVs are in a deferred status by NIST, meaning they are no longer maintained or updated

13% of organisations reported breaches of AI models or applications.

Just 27% of organisations enforce a least privilege access model.

Organisations self-identifying as "Established" in their identity posture follow 5.1 best practices.

64% of organizations experience mission-critical workflow disruptions or failures.

58% of organizations suffer data center downtime due to workflow failures.

Nearly half of organizations (48%) are not prepared to confront the urgent challenges posed by quantum computing.

There was a significant reduction in the number of organisations that planned to invest in security following a breach: 49% in 2025 compared to 63% in 2024.

71% of UK organisations experienced a cyber attack in the past year.

Organisations using AI and automation extensively throughout their security operations saved an average of $1.9 million in breach costs.

62% of Canadians report they either like or have a strong preference to use fingerprints for security.

Organisations that detected a breach internally observed a $900,000 savings on breach costs compared to those disclosed by an attacker.

6% of Canadians reported their stolen identity was used by a criminal to open a financial account (approximately 8 million victims), an increase from 5% in 2023 and 5.6% in 2020.

32.1% of vulnerabilities (Known Exploited Vulnerabilities - KEVs) had exploitation evidence on or before the day of their CVE disclosure, often indicating zero-day exploitation. This marks an 8.5% increase in the percentage of KEVs exploited on or before disclosure compared to 23.6% in 2024.

In 45% of all test cases, LLMs introduced vulnerabilities classified within the OWASP Top 10.

LLMs failed to secure code against log injection (CWE-117) in 88% of cases

Over 5,000 highly convincing fake pharmacy websites were uncovered (April-June 2025), scamming people seeking high-demand prescriptions.

6% of Canadians reported their stolen identity was used by a criminal to open a financial account (approximately 8 million victims), an increase from 5% in 2023 and 5.6% in 2020.

58% of security teams report frequent false positives from application security scanners.