Cision PR Newswire

66% of simulated phishing emails utilized domain spoofing techniques.

40% of cybersecurity professionals in the United States reported that Multi-Factor Authentication (MFA) is not consistently enforced for privileged accounts in 2025.

At Infosecurity Europe, 18% of cybersecurity professionals reported fully implemented zero-trust frameworks in 2025.

61% of cybersecurity professionals in Germany identified deepfakes as the most significant identity-based threat in 2025.

43% of cybersecurity professionals in the United Kingdom reported that Multi-Factor Authentication (MFA) is not consistently enforced for privileged accounts in 2025.

16% of cybersecurity professionals in the United States reported that their organizations are fully prepared to handle AI-enhanced attacks in 2025.

50% of cybersecurity professionals in the United Kingdom identified phishing as the top identity-based threat in 2025.

50% of cybersecurity professionals in Germany reported that their organizations lack a dedicated Privileged Access Management (PAM) solution in 2025.

44% of cybersecurity professionals reported fully implemented zero-trust frameworks at it-sa in Germany in 2025.

27% of cybersecurity professionals reported fully implemented zero-trust frameworks at Black Hat USA in 2025.

PDFs comprised 56% of the top 20 attachments opened in simulated phishing emails.

Only 12% of cybersecurity professionals in the United Kingdom reported that their organizations are fully prepared to handle AI-enhanced attacks in 2025.

90% of the most-clicked subject lines in simulated phishing emails reference internal topics.

45% of the top 10 most-clicked simulated phishing emails referenced HR between July 1, 2025, and September 30, 2025.

19% of the top 20 attachments opened in simulated phishing emails were HTML files.

25% of the top 20 attachments opened in simulated phishing emails were Word documents.

45% of cybersecurity professionals in the United States cited phishing as their greatest risk in 2025.

82% of the top 20 clicked links in simulated phishing emails came from internally themed simulations between July 1, 2025, and September 30, 2025.

28% of cybersecurity professionals in Germany reported that their organizations are fully prepared to handle AI-enhanced attacks in 2025.

70% of simulated landing page interactions involve branded content.

25% of branded content interactions in simulated phishing emails involved Microsoft between July 1, 2025, and September 30, 2025.