Cyber threats are evolving faster than enterprise defenses can adapt—and generative AI is widening the gap.
With unprecedented speed and scale, AI is enabling attackers to bypass legacy systems and overwhelm security teams. Traditional defenses are no longer sufficient. Our State of Cybersecurity 2025 research shows just 36% of technology leaders acknowledge that AI is outpacing their security capabilities—yet a staggering 90% of companies lack the maturity to counter today’s AI-enabled threats.
This is not merely a technical issue; it is a strategic risk. The cyber threat landscape is being reshaped not only by technology, but by geopolitics. Heightened global tensions, changing
trade dynamics and shifting regulations are compounding cyber exposure. As companies respond by adjusting supply chains and data strategies, many are unknowingly introducing new cyber risks—especially when security assessment, compliance and risk protocols fail to keep pace.
We surveyed 2,286 security and technology executives—80% CISOs, 20% CIOs—from $1 billion-plus enterprises across 24 industries and 17 countries. Their insights offer a sobering view of the current state of cybersecurity—and a clear call to action for what must come next (see “About the research” on page 39 for more on the security posture maturity methodology).