2025 Cyberthreat Defense Report (CDR)

Only half of organisations that pay ransoms actually recover their data.

Low security awareness among employees' tops the list of barriers and challenges for IT security teams.

1 in every 8 IT dollars is allocated to cybersecurity.

Only 41% of victimised organisations chose to pay in 2024—down from 63% three years ago.

98% of organisations plan to strengthen their identity security postures this year, with detecting and responding to identity-related threats at the top of the list.

82% of organisations experienced successful cyberattacks in 2024—but only 64% expect the same this year.

Successful ransomware attacks have declined from a peak of 73% two years ago to 63% this year.

54% of ransom-paying victims recovered their data—down from 73% two years ago.

Nine in 10 organisations outsource to managed security service providers (MSSPs), with managed detection and response (MDR) at the top of the list

More than four in five security professionals (84%) prefer security tools powered by artificial intelligence.

Security budgets are projected to grow by just 4.3%, the smallest increase since 2021.