Cision PR Newswire
Reports
All Statistics
66% of simulated phishing emails utilized domain spoofing techniques.
40% of cybersecurity professionals in the United States reported that Multi-Factor Authentication (MFA) is not consistently enforced for privileged accounts in 2025.
At Infosecurity Europe, 18% of cybersecurity professionals reported fully implemented zero-trust frameworks in 2025.
61% of cybersecurity professionals in Germany identified deepfakes as the most significant identity-based threat in 2025.
43% of cybersecurity professionals in the United Kingdom reported that Multi-Factor Authentication (MFA) is not consistently enforced for privileged accounts in 2025.
16% of cybersecurity professionals in the United States reported that their organizations are fully prepared to handle AI-enhanced attacks in 2025.
50% of cybersecurity professionals in the United Kingdom identified phishing as the top identity-based threat in 2025.
50% of cybersecurity professionals in Germany reported that their organizations lack a dedicated Privileged Access Management (PAM) solution in 2025.
44% of cybersecurity professionals reported fully implemented zero-trust frameworks at it-sa in Germany in 2025.
27% of cybersecurity professionals reported fully implemented zero-trust frameworks at Black Hat USA in 2025.
PDFs comprised 56% of the top 20 attachments opened in simulated phishing emails.
Only 12% of cybersecurity professionals in the United Kingdom reported that their organizations are fully prepared to handle AI-enhanced attacks in 2025.
90% of the most-clicked subject lines in simulated phishing emails reference internal topics.
45% of the top 10 most-clicked simulated phishing emails referenced HR between July 1, 2025, and September 30, 2025.
19% of the top 20 attachments opened in simulated phishing emails were HTML files.
25% of the top 20 attachments opened in simulated phishing emails were Word documents.
45% of cybersecurity professionals in the United States cited phishing as their greatest risk in 2025.
82% of the top 20 clicked links in simulated phishing emails came from internally themed simulations between July 1, 2025, and September 30, 2025.
28% of cybersecurity professionals in Germany reported that their organizations are fully prepared to handle AI-enhanced attacks in 2025.
70% of simulated landing page interactions involve branded content.
25% of branded content interactions in simulated phishing emails involved Microsoft between July 1, 2025, and September 30, 2025.