Seventy two percent of organizations reported a security incident in the last 12 months in CrowdStrike’s 2024 Global Threat Report. Phishing remains the most common starting point for attacks, and Microsoft’s threat intelligence summary says 86% of malware is delivered through phishing and social engineering. CISA’s KEV catalog entry count reached 93 in a snapshot from 2025, showing that new exploitable flaws continue to appear even as incident costs keep rising.
Key Takeaways
- 17% of organizations paid a ransom multiple times
- 86% of malware is delivered through phishing and social engineering in Microsoft’s threat intelligence summary
- The CISA KEV catalog contained 93 vulnerabilities as of a specific snapshot in 2025, indicating continuing expansion (as shown in the catalog entry count on CISA)
- IBM reported that 1,000 records exposed increased breach costs significantly; it cites the cost per record approach in 2023 report
- FBI and CISA warned that business email compromise median loss per incident was $15,000 in 2023 (FBI IC3 BEC section)
- In Verizon DBIR 2024, the estimated cost of breaches is described as varying by incident type; the report’s incident-type distributions include quantification of cost drivers
- 55% of organizations reported using EDR (endpoint detection and response) in 2024 (survey-based measure in SonicWall’s 2024 report coverage).
- Cybersecurity spending in North America reached $30.2 billion in 2024 (projected by IDC).
- IDC forecasts global cybersecurity spending to grow at a 13.8% CAGR from 2024 to 2027.
- 48% of organizations said their backup systems are not fully protected against ransomware, according to Druva’s 2024 data resilience research.
- 75% of organizations reported using multifactor authentication (MFA) in Microsoft’s Digital Defense Report (2024)
- In 2023, phishing accounted for 76% of reported security incidents in APWG’s Quarterly Phishing Activity Trends report
- 52% of organizations report they use security automation to improve response times, according to the SANS 2024 survey on security automation
- 70% of organizations planned to increase investment in security operations (SecOps) in 2024, based on a CrowdStrike survey of IT and security leaders
- 57% of organizations reported deploying threat intelligence feeds in 2024, per a ThreatConnect/industry survey
Phishing and credential theft drive most breaches, while patching and ransomware readiness lag despite rising security spending.
Related reading
01 · Category
Cost Analysis13 stats
01
IBM reported that 1,000 records exposed increased breach costs significantly; it cites the cost per record approach in 2023 report
02
FBI and CISA warned that business email compromise median loss per incident was $15,000in 2023 (FBI IC3 BEC section)
03
In Verizon DBIR 2024, the estimated cost of breaches is described as varying by incident type; the report’s incident-type distributions include quantification of cost drivers
04
In 2023, the median organizational cost of a cyber incident for UK businesses was £9,000 (DCMS cyber breaches survey)
05
The World Economic Forum estimated that cybercrime costs could reach $10.5 trillion annually by 2025 (WEO/WEF report figure)
06
Chainalysis reported that actors received $449 million in Bitcoin in 2023 ransomware payments (2024 ransomware report)
07
In 2023, 18% of organizations were denied cyber insurance or had coverage limited (S&P Global Ratings cyber insurance article)
08
In Sophos’ 2024 report, 19% of organizations couldn’t restore data after ransomware
09
44% of breaches involved a cloud service or environment used incorrectly or misconfigured, based on IBM Security’s cloud breach analysis (Cost of a Data Breach report-related findings).
10
Cybersecurity insurance denied or limited coverage affected 20% of orgs in a 2023 S&P Global Ratings analysis (as reported in their cyber insurance article).
11
In CrowdStrike’s 2024 Global Threat Report, 72% of organizations reported they had a security incident in the last 12 months.
12
In 2023, 93% of exploited vulnerabilities in the U.S. were in the Known Exploited Vulnerabilities (KEV) catalog when attackers used them, per CISA KEV reporting
13
56% of organizations reported that their primary cybersecurity budget goes to incident response and monitoring capabilities, per the (ISC)² Cybersecurity Workforce Study 2024
Interpretation
Cost Analysis Interpretation
Across major surveys and reports, cyber costs are repeatedly shown as severe and measurable, from $15,000 median losses for business email compromise incidents in 2023 and £9,000 median costs for UK cyber incidents to ransomware payouts of $449 million in 2023 and an industry-wide projection that cybercrime could hit $10.5 trillion annually by 2025.
02 · Category
Threat Landscape5 stats
01
17% of organizations paid a ransom multiple times
02
86% of malware is delivered through phishing and social engineering in Microsoft’s threat intelligence summary
03
The CISA KEV catalog contained 93 vulnerabilities as of a specific snapshot in 2025, indicating continuing expansion (as shown in the catalog entry count on CISA)
04
ENISA’s Threat Landscape 2023 states that phishing remains one of the main initial access vectors
05
Google Threat Analysis Group (TAG) reported that phishing and credential theft are common tactics in large-scale campaigns (TAG reporting includes quantified incident counts)
Interpretation
Threat Landscape Interpretation
Across the threat landscape, phishing and social engineering dominate initial access with 86% of malware delivered this way, while the ongoing scale and persistence of the problem shows in 17% of organizations paying ransoms multiple times and the continued growth of known vulnerabilities in CISA KEV with 93 entries as of a 2025 snapshot.
03 · Category
Market & Adoption5 stats
01
55% of organizations reported using EDR (endpoint detection and response) in 2024 (survey-based measure in SonicWall’s 2024 report coverage).
02
Cybersecurity spending in North America reached $30.2 billion in 2024 (projected by IDC).
03
IDC forecasts global cybersecurity spending to grow at a 13.8% CAGR from 2024 to 2027.
04
52% of organizations are prioritizing identity and access management (IAM) investments in 2024, per SailPoint’s 2024 identity security survey findings.
05
51% of IT leaders reported adopting Zero Trust in some form, according to the 2024 Gartner survey results published in Gartner’s Zero Trust research synopsis.
Interpretation
Market & Adoption Interpretation
In 2024, adoption momentum in the market is clear as 55% of organizations use EDR and 51% of IT leaders have adopted some form of Zero Trust, while spending is also rising sharply with North America projected at $30.2 billion and global cybersecurity forecast to grow at a 13.8% CAGR from 2024 to 2027.
More related reading
04 · Category
User Adoption3 stats
01
52% of organizations report they use security automation to improve response times, according to the SANS 2024 survey on security automation
02
70% of organizations planned to increase investment in security operations (SecOps) in 2024, based on a CrowdStrike survey of IT and security leaders
03
57% of organizations reported deploying threat intelligence feeds in 2024, per a ThreatConnect/industry survey
Interpretation
User Adoption Interpretation
User adoption is trending upward as organizations increasingly roll out security automation and SecOps investment, with 52% using automation to improve response times and 70% planning to increase SecOps spending in 2024, while 57% are also deploying threat intelligence feeds.
05 · Category
Industry Trends2 stats
01
75% of organizations reported using multifactor authentication (MFA) in Microsoft’s Digital Defense Report (2024)
02
In 2023, phishing accounted for 76% of reported security incidents in APWG’s Quarterly Phishing Activity Trends report
Interpretation
Industry Trends Interpretation
Industry trends show that security is increasingly moving toward MFA, with 75% of organizations using it per Microsoft’s Digital Defense Report (2024), while phishing remains the dominant threat vector at 76% of reported incidents in APWG’s 2023 Quarterly Phishing Activity Trends report.
06 · Category
Industry Overview3 stats
01
62% of breaches used stolen credentials as an initial attack vector, according to Mandiant’s 2023 M-Trends report
02
The average dwell time was 56 days in 2023, based on Google Mandiant’s analysis published in the 2024 M-Trends report
03
48% of organizations said their backup systems are not fully protected against ransomware, according to Druva’s 2024 data resilience research.
Interpretation
Industry Overview Interpretation
In today’s industry landscape, attackers are increasingly leveraging stolen credentials, with 62% of breaches starting this way, and organizations are still slow to detect and contain incidents, as shown by a 56 day average dwell time in 2023, while 48% report ransomware exposure in backup systems.
report visual · Breakdown
How often security and incident preparedness fall short
A substantial share of organizations report gaps in coverage and resilience, especially around insurance denial/limits and ransomware recovery capabilities.
44%
44% of breaches involved a cloud service or environment used incorrectly or misconfigured, based on IBM Security’s cloud
56%
56% of organizations reported that their primary cybersecurity budget goes to incident response and monitoring capabilit
source-verifiedibm.com · isc2.org2024
Reference
Cite This Report
This report is designed to be cited. We maintain stable URLs and versioned verification dates. Copy the format appropriate for your publication below.
APA
Marcus Engström. (2026, February 13). Computer Security Statistics. Gitnux. https://gitnux.org/computer-security-statistics
MLA
Marcus Engström. "Computer Security Statistics." Gitnux, 13 Feb 2026, https://gitnux.org/computer-security-statistics.
Chicago
Marcus Engström. 2026. "Computer Security Statistics." Gitnux. https://gitnux.org/computer-security-statistics.
Sources & references
31 datasets cited across this report · attribution is report-level
+8 additional datasets cited (not shown individually)