> ## Content Index > Fetch the complete content index at: https://www.cybersecstats.com/llms.txt > Use this file to discover other available public pages before exploring further. # CyberSecStats #5 - Security spending, third-party breaches, and SMB threat landscape - URL: https://www.cybersecstats.com/cybersecstats-5-2/ - Published: 2025-03-31T10:04:22.000Z - Updated: 2025-05-10T16:41:15.000Z - Author: Laura M Hello! 👋🏼 Laura from CyberSecStats here with a weekly email of the latest cybersecurity vendor reports and research. All the stats below were published between March 24th - March 30th 2025\. --- ## General ### IDC Worldwide Security Spending Guide Semiannual forecast and analysis of global security spending segmented by technology type, industry, company size, and geographic region. #### Key stats: - Global security spending is expected to grow by 12.2% this year. - 70% of global security spending will be in the US and Europe. - More than half of the security spending will go on security software, with a 14.4% year-on-year growth rate. **Read the full report** [**here**](https://www.idc.com/getdoc.jsp?containerId=IDC%5FP33461&%5Fgl=1%2A1gbbp2s%2A%5Fup%2AMQ..%2A%5Fga%2AMTQ5OTQwOTQ5LjE3NDI1NDYwOTA.%2A%5Fga%5F541ENG1F9X%2AMTc0MjU0NjA4NC4xLjAuMTc0MjU0NjA4NC4wLjAuMA..%2A%5Fga%5FY7CNRMFF6J%2AMTc0MjU0NjA4NS4xLjAuMTc0MjU0NjA4NS4wLjAuMA..&ref=cybersecstats.com)**.** ### Ontinue 2H 2024 Threat Intelligence Report An analysis of recent cybersecurity threats and trends, particularly ransomware activities. #### Key stats: - Ransomware attacks surged by 132% in Q1 2025. - Ransom payments declined by 35% in Q1 2025. - In Q1 2025, Ontinue's ATO team detected a 1,633% spike in vishing (video phishing )-related incidents compared to the previous quarter. **Read the full report** [**here**](https://www.ontinue.com/wp-content/uploads/2025/03/2025%5F2H-Threat-Intelligence-Report.pdf?ref=cybersecstats.com)**.** ### NodeZero The State of Cybersecurity in 2025: Data-Driven Insights from Over 50,000 NodeZero® Pentests A report examining common security vulnerabilities and shortcomings in current defense strategies. #### Key stats: - Despite 98% of organisations using vulnerability scanning, only 34% find it highly effective due to false positives. - 53% of practitioners and 36% of security leaders admit to delaying patches due to operational constraints. **Read the full report** [**here**](https://www.horizon3.ai/downloads/research/annual-insights-report-the-state-of-cybersecurity-in-2025/?ref=cybersecstats.com)**.** ## Industry-specific ### FICO 2024 Scams Impact Survey: UK Survey analyzing consumer adoption, trust levels, and security perceptions regarding real-time payments (RTP) in the UK. #### Key stats: - 23% of UK consumers say they do not know if real-time payment processes include enough security checks. - Only 35% of UK consumers consider real time payments to be more secure than a credit card, well below the global average of 51%. - 49% of UK consumers view real time payments and credit cards as equally safe. **Read the full report** [**here**](https://www.fico.com/en/latest-thinking/ebook/2024-scams-impact-survey-uk?ref=cybersecstats.com)**.** ### FICO 2024 Scams Impact Survey: Indonesia Survey analyzing consumer adoption, trust levels, and security perceptions regarding real-time payments (RTP) in Indonesia. #### Key stats: - 23% of Indonesian consumers reported losing money to scams via RTP. - The share of high-value scam losses exceeding Rp 70 million (USD$4,300) has risen to 8% in 2024. - More than half (56%) of consumers in Indonesia identified having better fraud detection systems as the most important action banks can take to protect them from scams. **Read the full report** [**here**](https://www.fico.com/en/latest-thinking/ebook/2024-scams-impact-survey-indonesia?ref=cybersecstats.com)**.** ### VicOne 2025 Automotive Cybersecurity Report A report analyzing emerging cybersecurity threats and trends impacting the global automotive industry #### Key stats: - More than 77% of automotive vulnerabilities were found on onboard or in-vehicle systems in 2024. - A total of 215 automotive cybersecurity incidents were recorded in 2024. - The total count of automotive-related vulnerabilities (“CVEs”) published in 2024 reached 530, nearly twice as many as the 2019 count. **Read the full report** [**here**](https://vicone.com/reports/2025-automotive-cybersecurity-report?ref=cybersecstats.com)**.** ### Alkami Generational Trends in Digital Banking Study Research exploring how financial institutions are adapting their fraud prevention strategies and consumer perceptions regarding data protection in digital banking. #### Key stats: - 93% of digital banking Americans indicated that protecting data from financial fraudsters and hackers was important or very important to them. - 91% of digital banking Americans indicated that protecting data from other unauthorized third parties was important or very important to them **Read the full report** [**here**](https://vicone.com/reports/2025-automotive-cybersecurity-report?ref=cybersecstats.com)**.** ### Bank Director 2025 Risk Survey Survey about key risk concerns and priorities among banking leaders. #### Key stats: - 69% of bank CEOs, senior executives and directors said fraud was a top risk for their institution. - 94% of bank CEOs, senior executives and directors reported that their bank or its customers have been directly affected by check fraud over the past 18 months. - More than half of bank CEOs, senior executives and directors focus on staff education and training to combat fraud. **Read the full report** [**here**](https://www.bankdirector.com/article/2025-risk-survey-cybersecurity-fraud-at-the-forefront/?ref=cybersecstats.com)**.** ### Claroty State of CPS Security: Healthcare Exposures 2025 Report analyzing critical vulnerabilities in medical devices. #### Key stats: - 89% of healthcare organisations have the top 1% of riskiest IoMT devices on their networks, which contain known exploitable vulnerabilities (KEVs) linked to active ransomware campaigns and an insecure connection to the internet. - 9% of IoMT devices contain confirmed KEVs in their systems, impacting 99% of organisations. - 20% of HIS (hospital information systems), which manage clinical patient data, as well as administrative and financial information, have KEVs linked to ransomware and insecure internet connectivity, impacting 58% of organisations **Read the full report** [**here**](https://claroty.com/resources/reports/state-of-cps-security-healthcare-exposures-2025?ref=cybersecstats.com)**.** ## Phishing #### IRONSCALES The Hidden Gaps in SEG Protection Research quantifying the failure rates of Secure Email Gateways (SEGs). #### Key stats: - Secure Email Gateways (SEGs) are missing an average of 67.5 phishing emails per 100 mailboxes every month. - Each missed phishing email costs an average of $36.29 to investigate and remediate. - Each missed phishing email takes 27.5 minutes of analyst time. **Read the full report** [**here**](https://secure.ironscales.com/hidden-gaps-in-seg-protection-white-paper?ref=cybersecstats.com)**.** ## Credentials ### Bitwarden Business Insights report Report on credential security practices within organizations. #### Key stats: - 48% of organisations report ineffective password health monitoring. - Employees take an average of 9 days to update weak or compromised credentials. - 36% of IT admins cite difficulty tracking employee progress toward more secure practices. **Read the full report** [**here**](https://bitwarden.com/resources/bitwarden-business-insights-report/?ref=cybersecstats.com)**.** ## AI ### KELA 2025 AI Threat Report: How cybercriminals are weaponizing AI technology Report examining how cybercriminals are weaponizing AI technology. #### Key stats: - KELA found a 200% surge in cybercriminals seeking AI to launch attacks. - There was a 52% increase in discussions related to jailbreaking methods on cybercrime forums in 2024 compared to the previous year. - KELA's platform recorded a 200% increase in mentions of malicious AI tools and tactics in 2024. **Read the full report** [**here**](https://www.kelacyber.com/resources/research/2025-ai-threat-report/?ref=cybersecstats.com)**.** ## Other ### Checkmarx DevSecOps Evolution 2025 Report examining how large enterprise development and security teams are progressing toward integrated DevSecOps practices #### Key stats: - 72% of developers spend more than 17 hours each week on security-related tasks. - 21% of developers surveyed say that security is their top priority when coding. - 41.53% of responding developers reported that they understand the vulnerability tickets they receive, as well as how the vulnerability manifests during runtime, from 41-60% of the time. **Read the full report** [**here**](https://checkmarx.com/evolution-devsecops/?ref=cybersecstats.com)**.** ### SecurityScorecard 2025 Global Third-Party Breach Report Report on trends, attack patterns, and impacts of third-party security breaches across industries and regions. #### Key stats: - 35.5% of all breaches in 2024 were third-party related. - 46.75% of third-party breaches involved technology products and services. - 41.4% of ransomware attacks now start through third parties. **Read the full report** [**here**](https://securityscorecard.com/resource/global-third-party-breach-report/?ref=cybersecstats.com)**.** ### Insurance Information Institute (Triple-I) and HSB Addressing the Personal Cyber Protection Gap Report examining the disparity between rising consumer cyber threats and the low adoption rates of personal cyber insurance #### Key stats: - Three-quarters of consumers have had their personal information lost or stolen in some form of cybercrime. - 23% of consumers had personal information compromised in a data breach. - Over 50% of insurance agents believe clients would be willing to pay up to $100 for personal cyber insurance coverage **Read the full report** [**here**](https://www.iii.org/sites/default/files/docs/pdf/personal%5Fcyber%5Fprotection%5Fgap%5F03252025.pdf?ref=cybersecstats.com)**.** ### VikingCloud's 2025 SMB Threat Landscape Report Research exploring the financial and operational impact cyberattacks have on small- and medium-sized businesses (SMBs) #### Key stats: - A successful cyberattack would force nearly 1 in 5 SMBs to close. - For nearly a third of SMBs, a cyberattack with minimal financial impact – less than $10,000 – would cause them to shut down. - Cybersecurity (48%) has emerged as the second highest business concern for SMBs. **Read the full report** [**here**](https://www.vikingcloud.com/resources/vikingclouds-2025-smb-threat-landscape-report-small--and-medium-sized-businesses-big-cybersecurity-risks?ref=cybersecstats.com)**.** ### F-Secure third annual F-Secure Cyber Threats Guide Analysis of major consumer cyber threats, including scams and data theft. #### Key stats: - 56% of consumers encountered scam attempts at least monthly in 2024. - 48% of consumers have fallen victim to cyber crime in the last 12 months. - Cyber criminals sell personal data on illegal online marketplaces for as little as $0.50 **Read the full report** [**here**](https://www.f-secure.com/en/partners/insights/cyber-threats-guide-2025?ref=cybersecstats.com)**.**