52% of enterprises report meaningful impact from agentic AI in IT.

PowerShell was the primary attack vector with 96,061 detections by Trellix, followed by Cobalt Strike with 85,986 detections targeting the IT-to-OT boundary.

The average time from vulnerability disclosure to patch deployment in operational technology environments exceeds 180 days, compared to 30 days for traditional IT systems.

90% of US SMB leaders agree that IT is more important today than it was 10 years ago.

29% of organizations adopting AI have the CIO and IT org leading AI security.

2% of business executives view cloud and IT as profit centers.

48% of cybersecurity professionals view securing converging IT/OT architecture as crucial for positive outcomes over the next five years.

Over 60% of top-clicked phishing emails were related to HR and IT.

Internal communications are a significant driver of phishing failures. Emails impersonating internal teams, particularly HR and IT, received the most failures in phishing simulations.