> ## Content Index
> Fetch the complete content index at: https://www.cybersecstats.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# CyberSecStats #12 - Dark web trends, state of AI, and quantum readiness
- URL: https://www.cybersecstats.com/cybersecstats-12-dark-web-trends-state-of-ai-and-quantum-readiness/
- Published: 2025-05-12T13:53:08.000Z
- Updated: 2025-08-13T09:44:37.000Z
- Author: Laura M

Hello! 👋🏼 Laura from CyberSecStats here with a weekly email of the latest cybersecurity vendor reports and research. 

All the cybersecurity statistics below were published between May 5th - May 11th, 2025\. 

---

## General

### 2025 Cisco Cybersecurity Readiness Index

How prepared are organizations to deal with today’s cyber incidents? 

#### Key stats:

- Only 4% of organizations are at 'Mature' level of cybersecurity readiness.
- 86% experienced AI-related security incidents in the last year.
- Only 45% allocate more than 10% of their IT budget to cybersecurity (down 8% year-over-year).

**Read the full report** [**here**](https://newsroom.cisco.com/c/dam/r/newsroom/en/us/interactive/cybersecurity-readiness-index/2025/documents/2025%5FCisco%5FCybersecurity%5FReadiness%5FIndex.pdf?ref=cybersecstats.com)**.**

## SMBs

### CrowdStrike 2025 State of SMB Cybersecurity Report

Cybersecurity spending trends and other general insights from SMB decision-makers across various industries and company sizes. 

#### Key stats:

- Only 36% of SMBs are investing in new cybersecurity tools.
- Only 11% use AI-powered defenses.
- Over half of SMBs (<50 employees) spend under 1% of their annual budget on cybersecurity.

**Read the full report** [**here**](https://www.crowdstrike.com/en-us/resources/reports/state-of-smb-cybersecurity-survey/?ref=cybersecstats.com)**.**

### Kinetic Business Small and Medium-sized Business Technology Report

Another report about SMB cybersecurity attitudes and capabilities based on a survey of 300+ owners, directors, and managers at SMBs in the U.S.

#### Key stats:

- Only 49% of SMBs plan to invest in cybersecurity tech.
- 52% lack confidence in handling cyber threats.
- 52% say they lack resources for better security.

**Read the full report** [**here**](https://media.business.windstream.com/kbprod/wp-content/uploads/2025/05/2025-SMB-Survey-Report.pdf?utm%5Fsource=press%20release&utm%5Fmedium=report&utm%5Fcampaign=community%20champions)**.**

## Geography-specific

### Marsh UK Cyber Insurance Claims Trend Report 2024

A detailed analysis of cybersecurity insurance claims submitted by Marsh UK clients.

#### Key stats:

- UK cyber claims in 2024 were down 20% from the 2023 spike.
- Still \~33% higher than 2020–2022 levels.
- Extortion (incl. ransomware) drove 28% of claims.

**Read the full report** [**here**](https://www.marsh.com/en-gb/services/cyber-risk/insights/uk-cyber-insurance-claims-trends-report-2024.html?ref=cybersecstats.com#download%5Freport)**.**

## Industry-specific

### SITA 2024 North American Air Transport IT Insights

A research report on airline cybersecurity developed in collaboration with Airlines for America (A4A) and based on input from carriers representing more than 60% of North American passenger traffic. 

#### Key stats:

- 77% of North American airlines list cybersecurity as one of their top 3 IT priorities.
- 100% are adopting advanced cybersecurity measures (PAM, SSO, DDoS protection).
- 100% cite third-party vendor security as a key concern.

**Read the full report** [**here**](https://www.sita.aero/globalassets/docs/surveys--reports/2024-sita-north-america-airline-it-insights.pdf?ref=cybersecstats.com)**.**

### Feedzai 2025 AI Trends in Fraud and Financial Crime Prevention 

A survey of 562 financial professionals about what kind of fraud and financial crime they’re facing right now. 

#### Key stats:

- 50%+ of fraud is driven by AI and hyper-realistic impersonations.
- 9 in 10 banks use AI to detect fraud.
- 92% of banks say fraudsters are leveraging generative AI.

**Read the full report** [**here**](https://www.feedzai.com/resource/state-of-ai/?ref=cybersecstats.com)**.**

## Other

### Bitsight 2025 State of the Underground

What’s happening on the dark web? A detailed report into data leaks and cybercriminal discussion trends based on tens of thousands of dark web and deep web posts processed using Bitsight IQ.

#### Key stats:

- Data breach info shared on underground forums up 43%.
- Ransomware leak sites were up 53% in 2024.
- 2.9B unique sets of compromised credentials were found in 2024 (up from 2.2B in 2023).

**Read the full report** [**here**](https://www.bitsight.com/resources/2025-state-of-the-underground?ref=cybersecstats.com)**.**

### Corero 2025 Threat Intelligence Report

Insights into how DDoS attacks evolved in 2024\. 

#### Key stats:

- Corero customers faced an average of 11 DDoS attacks/day (up 5% YoY).
- Small-scale (1-5 Gbps) attacks dropped from 19.4% (2019) to 12.4%.
- 68% struggle to prove DDoS protection ROI to leadership.

**Read the full report** [**here**](https://www.corero.com/lp-report-threat-intelligence-report-2025/?ref=cybersecstats.com)**.**

### Pentera State of Pentesting survey report

What's happening with pen testing in 2025? A penetration testing-related survey of 500 CISOs and senior security executives from enterprises with more than 3,000 employees across the United States, Germany, France, and the United Kingdom.

#### Key stats:

- 50% of CISOs identify software-based testing as a primary method for uncovering exploitable security gaps within their organizations.
- 76% reported major impacts after a breach.
- U.S. enterprises spend \~$187K/year on pentesting.

**Read the full report** [**here**](https://pentera.io/resources/reports/global-state-of-pentesting-2025-survey-report/?ref=cybersecstats.com)**.**

### MixMode 2025 State of AI in Cybersecurity Report

How is AI being used in cybersecurity right now? This report examines AI cybersecurity use cases from a survey of 685 U.S. IT and security professionals working primarily in Critical Infrastructure, SLED, and U.S. federal government agencies. 

#### Key stats:

- 43% of organizations use AI to anticipate and prevent attacks.
- 58% use AI in the Security Operations Centre (SOC).
- Among organizations using AI in the SOC, 57% report faster alert resolution.

**Read the full report** [**here**](https://mixmode.ai/state-of-ai-in-cyber-2025/?ref=cybersecstats.com)**.**

### Coalition 2025 Cyber Claims Report

Data about the cybersecurity insurance market focusing on emerging cyber trends and their impact on Coalition policyholders throughout the full year of 2024\. 

#### Key stats:

- 60% of claims stemmed from BEC and funds transfer fraud.
- Claims frequency dropped 7% YoY.
- Average ransom demand dipped below $1M - first time in 2+ years.

**Read the full report** [**here**](https://web.coalitioninc.com/download-2025-cyber-claims-report.html?ref=cybersecstats.com)**.**

### DigiCert Quantum Readiness Gap: DigiCert Study Finds Just 5% of Enterprises Have Quantum-Safe Encryption in Place

A survey of 1,042 senior and C-level cybersecurity managers in the United States, the United Kingdom, and Australia about their quantum readiness.

#### Key stats:

- Only 5% of enterprises have implemented quantum-safe encryption.
- Only 38% feel “very prepared” for quantum threats.
- 46.4% say substantial portions of their encrypted data could be compromised.

**Read the full report** [**here**](https://www.digicert.com/news/quantum-readiness-gap-a-digicert-study-on-quantum-safe-encryption?ref=cybersecstats.com)**.**