> ## Content Index > Fetch the complete content index at: https://www.cybersecstats.com/llms.txt > Use this file to discover other available public pages before exploring further. # CyberSecStats #4 - Tech debt, identity attacks, and zero-hour phishing attacks - URL: https://www.cybersecstats.com/cybersecstats-4-tech-debt-identity-attacks-and-zero-hour-phishing-attacks/ - Published: 2025-03-24T11:50:11.000Z - Updated: 2026-01-15T17:25:37.000Z - Author: Laura M Hello! 👋🏼 Laura from CyberSecStats here with a weekly email of the latest cybersecurity vendor reports and research. All the stats below were published between March 17th - March 23rd 2025\. --- ## General ### Bedrock Security 2025 Enterprise Data Security Confidence Index A survey of cybersecurity professionals at large enterprises on their confidence in data security, challenges in tracking sensitive data across cloud environments, and evolving roles due to increased AI adoption. #### Key stats: - 82% of US cybersecurity professionals report visibility gaps in finding and classifying organizational data. - Only 11.5% of US cybersecurity professionals reported no change in their security role. - 76% of organisations cannot produce a complete data asset inventory within hours when needed for compliance or security incidents. **Read the full report** [**here**](https://mms.businesswire.com/media/20250317062585/en/2410713/1/bedrock-infographic-all-final.pdf?ref=cybersecstats.com)**.** ### Logicalis Global CIO Report 2025 A survey of 1,000 global CIOs on how their roles are evolving. #### Key stats: - 95% of organizations are investing in tech to create new revenue streams. - 64% of organizations acknowledge that tech investments have yet to deliver returns. - Despite unprecedented spending on security solutions, 88% of organisations experienced cybersecurity incidents in the last 12 months. 43% endured multiple breaches. **Read the full report** [**here**](https://www.logicalis.com/cio-report?ref=cybersecstats.com)**.** ### Red Kanary Threat Detection Report 2025 A report with insights on detecting, preventing, and mitigating cyber threats based on analysis of nearly 93,000 threats that bypassed traditional security controls. #### Key stats: - The Red Canary's 2025 Threat Detection Report noted 4x as many identity attacks compared to the 2024 edition. - None of the nearly 93,000 threats analysed were prevented by customers' expansive security controls. - Organizations in the educational services sector accounted for 63% of all VPN use. **Read the full report** [**here**](https://redcanary.com/threat-detection-report/?ref=cybersecstats.com)**.** ### Ivanti 2025 State of Cybersecurity Report: Paradigm Shift A cybersecurity report surveying over 2,400 security professionals on top predicted threats for 2025 and highlighting gaps in preparedness, exposure management, technology debt, and operational silos. #### Key stats: - Only 29% of security professionals report being very prepared for ransomware attacks. - 1 in 3 consider tech debt a serious concern. - 62% claim that silos slow down security response times. **Read the full report** [**here**](https://www.ivanti.com/resources/research-reports/state-of-cybersecurity-report?ref=cybersecstats.com)**.** ### HP Wolf Security Threat Insights Report: March 2025 A cybersecurity report highlighting recent malware campaigns. #### Key stats: - Threats delivered in PDF documents accounted for 10% in Q4 2024. - 11% of email threats evaded gateway security in Q4 2024. - More than half (53%) of threats targeting endpoints were delivered by email in Q4 2024. **Read the full report** [**here**](https://threatresearch.ext.hp.com/hp-wolf-security-threat-insights-report-march-2025/?ref=cybersecstats.com)**.** ## Industry-specific ### Kroll 2025 Financial Crime Report A report surveying executives in financial and professional services on anticipated increases in financial crime risks. #### Key stats: - 68% of executives who expect an increase in financial crime risk cite cybersecurity threats and data breaches as the top risk factor. - Nearly half of financial and professional services organizations (49%) expect to invest in AI solutions as part of their efforts to tackle financial crime. - 44% of financial and professional services organisations use AI for identifying risk signals. **Read the full report** [**here**](https://www.kroll.com/en/insights/publications/financial-crime-report-2025?ref=cybersecstats.com)**.** ### KnowBe4 From Primary Schools to Universities, The Global Education Sector is Unprepared for Escalating Cyber Attacks A report on the cybersecurity landscape in the education sector. #### Key stats: - Some schools endure over 2,500 attempted cyberattacks a day. - In 2023, there was a staggering 105% increase in known ransomware attacks against K–12 and higher education, surging from 129 attacks in 2022 to 265 in 2023. - In higher education specifically, ransomware attacks were up 70% over 2022. **Read the full report** [**here**](https://www.knowbe4.com/hubfs/Global-Education-Report%5FUS%5FEN.pdf?ref=cybersecstats.com)**.** ## Ransomware ### NCC Group Monthly Threat Pulse – Review of February 2025 A monthly cybersecurity report analyzing global ransomware trends. #### Key stats: - February 2025 attacks reached an all-time monthly high of 886. - February ransomware attacks (886) increased by 119% compared to February 2024 (403). - Cl0p was responsible for 330 attacks in February 2025, a 460% increase from January (59). **Read the full report** [**here**](https://www.nccgroup.com/uk/newsroom/ncc-group-monthly-threat-pulse-review-of-february-2025/?ref=cybersecstats.com)**.** ## Cloud ### Tenable Cloud AI Risk Report 2025 A cybersecurity report assessing vulnerabilities in cloud-based AI workloads and services. #### Key stats: - 70% of cloud workloads using AI services contain unresolved vulnerabilities compared to 50% that don’t use AI. - 77% of organizations have the overprivileged default Compute Engine service account configured in Google Vertex AI Notebooks. - 91% of Amazon SageMaker users have at least one notebook that, if compromised, could grant unauthorized access. **Read the full report** [**here**](https://www.tenable.com/cyber-exposure/tenable-cloud-ai-risk-report-2025?utm%5Fmedium=referral&utm%5Fsource=na&utm%5Fcampaign=cmpn-00033040&utm%5Fcontent=global%5Fpress%5Frelease)**.** ## Phishing ### KnowBe4 Phishing Threat Trend Report A report with the latest insights into the phishing landscape. #### Key stats: - There was a 17.3% increase in phishing emails between September 15, 2024 and February 14, 2025 compared to the previous six months. - 82.6% of all phishing emails analysed exhibited some use of AI. - There was a 22.6% increase in ransomware payloads. **Read the full report** [**here**](https://www.knowbe4.com/hubfs/Phishing-Threat-Trends-2025%5FReport.pdf?ref=cybersecstats.com)**.** ## Credentials ### Cloudflare Password reuse is rampant: nearly half of observed user logins are compromised Analysis of user login behaviors. #### Key stats: - Approximately 41% of successful human authentication attempts involve leaked credentials. - When including bot-driven traffic, 52% of all detected authentication requests contain leaked passwords. - 95% of login attempts involving leaked passwords are coming from bots. **Read the full report** [**here**](https://blog.cloudflare.com/password-reuse-rampant-half-user-logins-compromised/?ref=cybersecstats.com)**.** ## Other ### Menlo Security State of Browser Security Report A cybersecurity report examining the evolving landscape of browser security threats. #### Key stats: - There has been a 130% increase in zero-hour phishing attacks in 2024. - There has been a 140% increase in browser-based phishing attacks in 2024 compared to 2023. - There is up to six days as the average window of exposure before legacy security tools begin blocking pages from zero-hour phishing attacks. **Read the full report** [**here**](https://www.menlosecurity.com/resources/state-of-browser-security-report-2024?ref=cybersecstats.com)**.** ### Bitsight Under the Surface: Uncovering Cyber Risk in the Global Supply Chain A report analyzing cybersecurity risks in the global digital supply chain. #### Key stats: - One-third of the U.S. supply chain relies on software or services from companies formally designated by the Department of Defense as "Chinese Military Companies". - Technology providers have 10x more internet-facing assets than consumers. - Providers lag behind consumers in areas such as patch management, open ports, insecure systems, and botnet infections. **Read the full report** [**here**](https://www.bitsight.com/resources/hidden-pillars-global-supply-chain?ref=cybersecstats.com)**.** ### Cato Networks 2025 CTRL™ Threat Report A cybersecurity report detailing how threat actors exploit generative AI tools by bypassing security controls to create malware without coding expertise. **Read the full report** [**here**](https://www.catonetworks.com/resources/2025-cato-ctrl-threat-report-rise-of-zero-knowledge-threat-actor/?ref=cybersecstats.com)**.** ### Dark Reading/ Seemplicity The Rise of AI-Powered Vulnerability Management A survey examining how cybersecurity teams are adopting AI. #### Key stats: - 86% of security teams today utilize some type of AI within their security tool stack - 46% depend on AI that is embedded in their security tools and delivered by their vendors versus building their own. - False positive and negative rates are the No. 1 way that organizations reported that they evaluate the efficacy of AI in security, named by 66% of respondents. **Read the full report** [**here**](https://seemplicity.io/papers/darkreading-the-rise-of-ai-powered-vulnerability-management/?ref=cybersecstats.com)**.** ### Zimperium Catch Me If You Can: Rooting Tools vs The Mobile Security Industry A cybersecurity analysis of the evolving risks posed by rooted and jailbroken mobile devices. #### Key stats: - Rooted devices are more than 3.5 times more likely to be targeted by mobile malware. - The exposure factor of rooted devices versus stock devices varies from 3x to \~3000x. - System compromise incidents are 250 times higher on rooted devices compared to stock devices. **Read the full report** [**here**](https://www.zimperium.com/blog/catch-me-if-you-can-rooting-tools-vs-the-mobile-security-industry/?ref=cybersecstats.com)**.** ### Digital.ai 2025 Application Security Threat Report A cybersecurity report analyzing application-based attacks in 2025. #### Key stats: - More than eight-in-ten applications are under constant attack, marking a near 20% increase compared to last year - 88% of organizations in financial services saw their apps attacked. - 79% of healthcare-related applications are under attack. **Read the full report** [**here**](https://digital.ai/resource-center/whitepapers/2025-application-security-threat-report/?ref=cybersecstats.com)**.**