2026 State of AI Security Report

99.9% of AI vulnerabilities with an available fix remain unpatched.

Among organizations adopting AI, 64% run vector databases.

Between 87% and 98% of AI workloads across the three major cloud providers lack customer-managed encryption.

Among organizations adopting AI, 55% operate four or more AI services simultaneously.

56% of organizations have deployed AI agents into production.

50% of AI package vulnerabilities have a publicly available exploit, a 250-fold increase over 2024.

51% of organizations use AI to build custom applications.

81% of organizations using AI packages have at least one known vulnerability, up from 62% in 2024.