Enterprise AI security is failing at the basics, with companies averaging 300+ unsanctioned AI apps and widespread prompt injection vulnerabilities in production systems.

Most AI security incidents in 2025 involve basic attacks like prompt injection through external data and overpermissioned agents, not sophisticated exploits

Enterprises are running an average of 300+ unsanctioned AI applications without knowledge or oversight

Prompt injection attacks appear frequently across production deployments, with attackers increasingly using AI tools to identify vulnerabilities faster

Credential leaks related to AI usage have increased noticeably, reflecting poor security practices

Few companies have dedicated AI security teams, creating a significant gap between the risks and the organizational capacity to manage them