Lookout

68% of enterprises have zero technical visibility into autonomous AI agent workflows that inherit user identity and single sign-on tokens.

Emerging global statutory fines reach up to €35 million or 7% of an enterprise's total global annual turnover.

93% of security executives voice absolute confidence in their AI governance.

iOS devices are exposed to twice as many phishing attacks compared to Android.

427,000 malicious apps were detected on enterprise devices.

The vast majority of malware discoveries were classified as trojan malware, followed by surveillanceware and adware.

52% of all generative AI usage occurs on mobile endpoints.

72% of organizations are structurally incapable of auditing embedded AI Software Development Kits (SDKs) hidden inside everyday mobile applications.

84% of IT leaders actively stall business-led AI initiatives.

97% of leaders agree that AI governance is mission-critical.

63% of organizations have investigated severe data leaks within the past 12 months where generative AI tools were a definitive contributing factor.

Organizations allocate an average of 19% of their 2026 security budgets to AI compliance.

59% of mobile AI traffic is hidden from traditional network-discovery tools, routing directly between local apps and external clouds without ever crossing a corporate gateway.

78% of security leaders cannot generate the audit-ready evidence required by emerging frameworks like the EU AI Act.

APAC had the highest global phishing encounter rates, followed by EMEA and North America.

In 2024, the percentage of Android users targeted by phishing attacks was 12%.

26% of iOS devices were targeted by threat actors with phishing attacks in 2024.

The top device misconfigurations include: Out-of-date OS (29.5%), No device lock (12%), No encryption (3.3%).

The top device misconfigurations include: Out-of-date OS (29.5%), No device lock (12%), No encryption (3.3%).