In this report we look at major trends affecting the S&P 500:
- Increasing exploitation of web vulnerabilities: Products with known exploited vulnerabilities are in wide use across the S&P 500, making it likely this method of initial access will continue growing.
- Risks from third parties: Breaches, outages, and software supply chain attacks all affected the S&P 500 in 2025, illustrating the many forms of third-party risk that companies must prepare for.
- Adoption and investment in artificial intelligence: Across the S&P 500, all companies show signs of AI adoption, but some industries are embracing its benefits– and risks– more than others.
