# Claim-by-claim evidence table

Original source: https://go.crowdstrike.com/rs/281-OBQ-266/images/CrowdStrike-2026-Global-Threat-Report.pdf?version=1

|Topic|Supported wording|Source location|Limit|
|---|---|---|---|
|Report year|2026 edition describes analysis throughout 2025|p.7|Not full-year 2026 observations|
|Average breakout|29 minutes for eCrime|pp.2,9,11|After initial access; lateral movement, not complete breach duration|
|Fastest breakout|27 seconds|pp.2,9|Extreme observed value, not typical or universal|
|Malware-free|82% of detections in 2025|pp.9,11|Vendor observational scope, not all global or Canadian attacks|
|AI-enabled adversaries|89% year-over-year increase in number of attacks|pp.5,15|Does not prove autonomous execution, share of all attacks, or AI-only causation|
|AI limitations|Primarily enhances existing tactics; case study limited impact|pp.15,18,20|Separate observations from forecasts|
|Defensive guidance|Identity, AI governance, patching, monitoring, response rehearsal|pp.48–49; Canadian baseline controls|Editorial synthesis; not a vendor endorsement|