Bitdefender 2026 Survey Highlights Breach Disclosure Pressure and Shadow AI Blind Spots
Original report publisher: not verified. Report discovered via Awesome Annual Security Reports.
Summary
Bitdefender’s survey of 1,200 IT and cybersecurity professionals found 55.2% had been told to keep a breach confidential and 47.4% lacked visibility into Shadow AI use. The report also highlights staffing shortages and security-tool complexity.
Key points
- The survey ran from April through June 2026 across six countries, covering security managers and frontline practitioners; its findings reflect anonymous, unaudited respondent accounts.
- 55.2% reported being told to keep a breach confidential when they believed it should be reported, compared with 57.6% in 2025 and 42% in 2023.
- 44.8% reported only partial visibility into employee AI use, while 2.5% reported none; internal AI governance was the leading planned security initiative at 40%.
- 70.1% reported increasingly sophisticated AI-powered phishing, while 52.6% believed AI was helping attackers more than defenders.
- Bitdefender Labs separately reported living-off-the-land techniques in 84% of major attacks, but only 20.5% of survey respondents ranked them among their top three threats.
- 47.6% said they could not staff round-the-clock security coverage; 25% described their EDR/XDR as requiring significant manual effort and 15% reported complexity limiting its use.
- 56% characterized compliance efforts as primarily a checkbox exercise, and 48% reported security controls were regularly bypassed for business purposes.
Article Details
- Publisher
- Bitdefender
- Scope
- Survey of management and frontline IT and cybersecurity professionals across six countries, conducted April through June 2026. Results reflect anonymous respondents' perceptions and experiences, not independently verified incidents.
- Sample Size
- 1,200 IT and cybersecurity professionals
- Key Statistics
- 55.2% of respondents reported being told to keep a breach confidential when they knew it should be reported, compared with 57.6% in 2025 and 42% in 2023.
- 70.1% of respondents said their organizations were seeing more sophisticated phishing attacks powered by AI.
- 51.8% claimed full visibility into employee AI usage; 44.8% reported partial visibility and 2.5% no visibility.
- Bitdefender Labs reported that 84% of major attacks leveraged Living off the Land techniques, based on analysis of more than 700,000 cyber incidents; only 20.5% of survey respondents ranked these techniques among their top three threats.
- 47.6% of respondents reported lacking staffing for 24x7 security coverage.
- Recommendations
- Audit vendor contracts for data residency, jurisdiction, and sub-processor clauses.
- Invest in prevention-first architecture that detects malicious behavioral patterns regardless of the tools used.
- Consolidate security tooling into fewer, better-integrated solutions to reduce operational complexity.
- Evaluate prevention capabilities through independent third-party testing against real attack techniques rather than relying solely on compliance certifications.
- Consider platforms with built-in compliance monitoring to automate evidence collection, compliance tracking, and audit workflows.
MITRE ATT&CK
T1021.001 · Remote Desktop ProtocolThe report identifies RDP as an existing target-environment capability used in Living off the Land attacks.T1047 · Windows Management InstrumentationThe report identifies WMI as a legitimate administrative utility used by attackers in Living off the Land attacks.T1059.001 · PowerShellThe report describes attackers using PowerShell already present in target environments for Living off the Land activity.
People
Andrei FlorescuPresident and General Manager of Bitdefender Business Solutions Group, quoted on attack-surface reduction, AI governance, and compliance.Brian ByrneBitdefender VP of Email Security, quoted on AI-generated phishing and the need for post-delivery visibility and rapid response.Daniel DarabanBitdefender Vice President of Products, quoted on prevention and reducing attackers' opportunities to operate.Martin ZugecBitdefender Technical Solutions Director, quoted describing APT36's daily production of AI-generated malware as increased output rather than innovative sophistication.Nicholas JacksonBitdefender Director of Cybersecurity Services, quoted on organizations' limited understanding of embedded AI capabilities.
Threat Actors
Vendors
Tools
Countries
FranceResearch participants are located across multiple continents and six countries: France, Germany, Italy, Singapore, the United Kingdom, and the United States.GermanyResearch participants are located across multiple continents and six countries: France, Germany, Italy, Singapore, the United Kingdom, and the United States.ItalyResearch participants are located across multiple continents and six countries: France, Germany, Italy, Singapore, the United Kingdom, and the United States.SingaporeResearch participants are located across multiple continents and six countries: France, Germany, Italy, Singapore, the United Kingdom, and the United States.United KingdomResearch participants are located across multiple continents and six countries: France, Germany, Italy, Singapore, the United Kingdom, and the United States.United StatesResearch participants are located across multiple continents and six countries: France, Germany, Italy, Singapore, the United Kingdom, and the United States.