98% of security leaders at U.S. organizations confirmed budget increases in the last 12 months.

Over 85% of New Yorkers indicated they would (41.8%) or might (43.7%) stop using a company if it suffered a data breach.

Only 45% of the full respondent pool say they remediate critical software vulnerabilities within a day.

80% of SMBs with a formal incident response plan in place were able to avoid major damage during an attack.

In Q3 2025, SMS toll fraud targeting the fintech sector grew by 97%, alongside a major spike in human fraud farm activity.

SMS toll fraud now comprises 78% of all attacks on the gig economy, up from 48% a year prior.

In Q3 2025, SMS toll fraud malicious traffic surged by 67% over Q2 2025, making it the fastest-growing attack type of the quarter.

Nearly 40% of schools feel underprepared for ransomware in 2025

High confidence in cybersecurity among school IT leaders dropped from 30% in 2024 to 18% in 2025

28% of organizations reported unrestricted network access between cloud workloads as a growing threat.

Logic and correctness issues increase by 75% in AI-generated code, including business logic errors, misconfigurations, and unsafe control flow.

Only 34% of SMB owners have a formal incident response or continuity plan developed with a cybersecurity professional.

13% of SMBs rely on untrained employees to handle alerts.

The leading motivations for working with a managed service provider (MSP) for SMBs are a fear of cyberattacks (52%) and a sense of responsibility to customers and stakeholders (40%).

59% of respondents that prioritize SBOM validation typically respond to critical software vulnerabilities within one day.

95% of surveyed organizations reported using AI tools in software development.

31% of SMB owners don't know exactly how much they spend on cybersecurity.

99% of organizations experienced at least one attack on their AI systems in the past year.

In Q3 2025, the gig economy experienced 51% fewer attacks but 49% more malicious traffic, resulting in a 300% increase in average attack size.

45% of SMBs cite employee negligence as their biggest cybersecurity concern, particularly acute in the education sector.