Cisco
Reports
All Statistics
Multi-turn attack success rate (ASR) ranges from 7.89% to 88.30% across the 15 closed/proprietary flagship models in the cohort.
Single-turn attack success rate (ASR) ranges from 2.19% to 64.91% across the 15 closed/proprietary flagship models in the cohort.
Gemini 3 Pro shifts from 18.10% single-turn ASR to 73.35% multi-turn ASR, a 4x increase.
61% of organizations in industrial sectors are deploying AI at scale.
48% of organizations in industrial sectors identify security as their biggest networking challenge.
85% of organizations in industrial sectors expect AI to improve their cybersecurity posture.
72% of all organizations surveyed are at least moderately prepared to control and secure agentic AI systems.
Talent gaps are most acute in the area of cybersecurity for AI, affecting 60% of all companies surveyed.
75% of Pacesetters (the most AI-ready group) report having the capacity to fully secure agentic AI systems that make decisions independently.
94% believe an improved network will enhance their cybersecurity posture.
One severe outage per business per year, often driven by factors including cyberattacks, adds up to $160B globally.
71% of respondents anticipate business disruptions from cyber incidents within the next 12 to 24 months.
96% of organizations plan to upgrade their IT infrastructure.
86% of organizations have experienced AI-related security incidents in the last year.
64% of respondents worry about inadvertently sharing sensitive information publicly or with competitors.
Nearly half of respondents admit to inputting personal employee or non-public data into GenAI tools.
63% of respondents are very familiar with Generative AI (GenAI).
Cross-regime deltas (multi-turn ASR minus single-turn ASR) range from −34.74 percentage points to +55.25 percentage points across the cohort.
Eight of 15 models have an absolute cross-regime gap greater than 15 percentage points.
Nova 2 Lite shows 34.05% single-turn ASR but 7.89% multi-turn ASR.
Enabling reasoning on Grok 4.1 Fast reduces multi-turn ASR from 88.30% to 43.47%.
Within each multi-turn attack strategy family, the spread between the most- and least-exposed models ranges from 79.51 to 89.25 percentage points.
Multi-turn attack success rates run 2x to 10x higher than single-turn baselines across eight open-weight LLMs in an earlier evaluation.
Imposter AI is more than 14 percentage points higher than the tenth-ranked procedure by weighted ASR.
Anthropic Claude-family single-turn ASR ranges from 2.19% to 3.64%, and multi-turn ASR ranges from 11.16% to 16.20%.
Grok 4.1 Fast in its non-reasoning configuration records a multi-turn ASR of 88.30%.
In an earlier open-weight evaluation, multi-turn ASR reached 92.78% against Mistral Large-2.
GPT-5.4 moves from 2.74% single-turn ASR to 24.68% multi-turn ASR, a 9x increase.
Imposter AI procedures produce a 37.50% weighted single-turn ASR, Soft Paraphrase produces 29.21%, and System Prompts produce 27.69%.
40% of organizations in industrial sectors cite cybersecurity concerns as a top obstacle to AI adoption.
55% of organizations surveyed prioritize defending models and data from tampering.
Less than a third (31%) of organizations surveyed report that they are fully equipped to control and secure agentic AI systems.
84% of Pacesetters (most AI-ready group) report full capability with end-to-end encryption for sensitive data, versus 30% of all companies.
74% of Pacesetters (most AI-ready group) report full capability with dynamic & granular access controls for AI systems and datasets, versus 27% of all companies.
Only 29% of all companies have fully integrated AI into security and identity systems, compared to 62% of Pacesetters (most AI-ready group).
81% of Pacesetters (most AI-ready group) report full capability to detect and prevent unauthorized tampering, compared to 29% of all companies.
87% of Pacesetters (most AI-ready group) report awareness of AI-specific threats, compared to 42% of all companies.
51% of organizations surveyed focus on recruiting the right talent to manage AI-specific cybersecurity threats.
84% of Pacesetters (most AI-ready group) control agent actions with guardrails and live monitoring vs 24% of all companies.
Major network outages are often driven by congestion, cyberattacks, and misconfigurations.
98% say secure networking is important to their operations and growth.
94% believe an improved network will enhance their cybersecurity posture.
One severe outage per business per year, often driven by factors including cyberattacks, adds up to $160B globally.
Only 4% of organizations worldwide have achieved a 'Mature' level of cybersecurity readiness. This is a slight increase from last year's Index, in which 3% of organizations worldwide were designated as Mature.
84% of organizations face increased security risks as employees access networks from unmanaged devices within hybrid work models.
Only 45% allocate more than 10% of their IT budget to cybersecurity. This allocation is down 8% year-over-year.
Over 77% of organizations report that their complex security infrastructures are impeding their ability to respond swiftly and effectively to threats. These infrastructures are often dominated by the deployment of more than ten point security solutions
Nearly half of organizations (49%) suffered cyberattacks in the last year.