7.0% of financial organizations are investing in third-party risk monitoring

42% of Gen Z and 40% of Millennial respondents would not immediately change their passwords or credit card information after being notified of a data breach, if they act at all.

21% of Gen Z and 16% of Millennials report being less concerned about online security than they were five years ago.

1 in 4 (23%) consumers said having loyalty or rewards points on the line would influence their decision to remain a customer

23.8% of financial organizations plan to invest in automated access controls.

33% of Millennials say they use a different password for every account as a measure to help themselves from being hacked.

30.7% of teams at financial organizations still rely on manual approval for access to high-risk systems requiring elevated privileges.

49.3% of teams at financial organizations spend 10–25 hours monthly preparing audit data.

Data exfiltration remained the most common threat in Q2 2025, accounting for 55% of all malicious packages uncovered.

There was a 188% increase in open source malware discovered in Q2 2025 compared to Q2 of the previous year.

Most consumers (68%) expect small businesses to maintain the same level of digital security as large corporations or better.

88.4% of financial organizations surveyed are "very confident" in passing a surprise compliance audit.

The "Yeshen-Asia" campaign, a sprawling six-month operation attributed to a suspected Chinese threat actor, involved over 60 malicious npm packages.

37% of Gen X and Boomers say they don't save their credit/debit card information in brand accounts as a measure to help themselves from being hacked.

Malware specifically targeting data corruption doubled in frequency in Q2 2025, making up 3% of total malicious packages, which equates to more than 400 unique instances.

Crypto miners saw a slight decline in Q2 2025, representing 5% of the total malicious packages identified, as attackers shifted towards more profitable and persistent vectors.

The malicious npm package named crypto-encrypt-ts, which masqueraded as a legitimate revival of the widely used CryptoJS library, accumulated nearly 1,928 downloads before analysis revealed its stealthy, data-harvesting nature.

7% of Gen X and Boomers report being less concerned about online security than they were five years ago.

The majority (67%) of consumers believe that their personal information is already on the dark web.

There was 118 total funding and M&A cybersecurity transactions.