Cybersecurity statistics / Vulnerabilities

81% of organizations using AI packages have at least one known vulnerability, up from 62% in 2024.

Publisher	Orca Security
Report	2026 State of AI Security Report
Published	9 July 2026
Topics	Vulnerabilities, AI Security, AI Packages

Published by Orca Security in 2026 State of AI Security Report, 9 July 2026. The figure is taken from the report as published; the full methodology is in the source.

View the original report

Related statistics

Exploited vulnerabilities accounted for 18% of ransomware incidents, down 14 percentage points year-over-year.

Sophos, 18/07/2026

Log4Shell generated 35.6 million detection events in the first half of 2026 in the financial services industry, more than two years after disclosure.

SonicWall, 12/07/2026

The GoodTech Telnet Server Buffer Overflow vulnerability generated 42.2 million detection events in the financial services industry in the first half of 2026.

SonicWall, 12/07/2026

Vulnerabilities account for 78.2% of critical exposures in Utilities.

Check Point, 04/07/2026

42.6% of all critical exposures are vulnerabilities, more than double the 18.7% recorded the year before.

Check Point, 04/07/2026

Vulnerabilities account for 56.4% of critical exposures in Government.

Check Point, 04/07/2026

Get the newsletter

Weekly cybersecurity statistics by email.