S&P 500 State of Cybersecurity 2025

In this report we look at major trends affecting the S&P 500: 

• Increasing exploitation of web vulnerabilities: Products with known exploited vulnerabilities are in wide use across the S&P 500, making it likely this method of initial access will continue growing.
• Risks from third parties: Breaches, outages, and software supply chain attacks all affected the S&P 500 in 2025, illustrating the many forms of third-party risk that companies must prepare for.
• Adoption and investment in artificial intelligence: Across the S&P 500, all companies show signs of AI adoption, but some industries are embracing its benefits– and risks– more than others.