# Sources > Every number and incident in The ultimate insider, with the public source it comes from, grouped by act. *Source: · site v0.1.23 · generated from the same content as the page, so the two cannot drift.* --- Sources # Every number on screen, and where it comes from The talk is built from the article [The ultimate insider](https://newsroom.sgit.ai/articles/ultimate-insider-three-collisions.html) on the SGit Newsroom, which links each figure to its source. They are listed here by act, in the order they appear. Where a figure is a prediction, a survey or preliminary, the slide says so. ## Act one: the insider - Ponemon Institute and DTEX Systems, [2025 Cost of Insider Risks Global Report](https://www.dtex.ai/blog/2025-cost-insider-risks-takeaways/), February 2025: 17.4 million dollars a year on average. - Anthropic, [Building effective agents](https://www.anthropic.com/research/building-effective-agents), December 2024: an agent as a model in a loop with tools. - Simon Willison, [The lethal trifecta for AI agents](https://simonwillison.net/2025/Jun/16/the-lethal-trifecta/), June 2025. - EchoLeak, CVE-2025-32711, June 2025: [Hack The Box analysis](https://www.hackthebox.com/blog/cve-2025-32711-echoleak-copilot-vulnerability). - Replit, July 2025: [account and timeline](https://dev.to/joylo/why-replits-ai-agent-deleted-a-production-database-389p); Jason Lemkin's [original thread](https://x.com/jasonlk/status/1946069562723897802). - Gemini CLI, July 2025: [AI Incident Database entry 1178](https://incidentdatabase.ai/cite/1178/). - Amazon Q extension for VS Code, July 2025: [SC Media](https://www.scworld.com/news/amazon-q-extension-for-vs-code-reportedly-injected-with-wiper-prompt). - Anthropic, [Disrupting the first reported AI-orchestrated cyber espionage campaign](https://www-cdn.anthropic.com/d7dd50dd1185f59be051b307150d877f2b82bd2c.pdf), November 2025; MITRE ATT&CK [campaign C0062](https://attack.mitre.org/campaigns/C0062/). - CyberArk, [2025 Identity Security Landscape](https://www.cyberark.com/press/machine-identities-outnumber-humans-by-more-than-80-to-1-new-report-exposes-the-exponential-threats-of-fragmented-identity-security/), April 2025: 82 to 1, 42 per cent privileged, 88 per cent. ## Act two: the infrastructure - Microsoft, [2023 State of Cloud Permissions Risks](https://techcommunity.microsoft.com/blog/microsoft-entra-blog/2023-state-of-cloud-permissions-risks-report-now-published/1061397): under 5 per cent, under 2 per cent, 40 per cent. - ThousandEyes, [AWS outage analysis, 20 October 2025](https://www.thousandeyes.com/blog/aws-outage-analysis-october-20-2025). - Cloudflare, [18 November 2025 outage post-mortem](https://blog.cloudflare.com/18-november-2025-outage/). - Palo Alto Unit 42, [SharePoint ToolShell threat brief](https://unit42.paloaltonetworks.com/microsoft-sharepoint-cve-2025-49704-cve-2025-49706-cve-2025-53770/), July to August 2025. - On this network: [nhi.sgit.ai](https://nhi.sgit.ai/) on non-human identity, [pki.sgit.ai](https://pki.sgit.ai/) on keys for agents, [nfrs.sgit.ai](https://nfrs.sgit.ai/) on the requirements that are not features. ## Act three: the spreadsheet - Secureframe 2024 survey as reported by [RegScale](https://regscale.com/blog/grc-spreadsheets-problem-symptom/): 48 per cent; SureCloud, [The Risk Reckoning 2025](https://www.surecloud.com/whitepaper/the-risk-reckoning-2025-uk-grc-survey-insights-for-enterprises-smbs). - Gartner, [over 40 per cent of agentic AI projects cancelled by the end of 2027](https://martech.org/gartner-40-of-agentic-ai-projects-will-fail-making-humans-indispensable/), June 2025, a prediction. - MIT NANDA, [The GenAI Divide](https://virtualizationreview.com/articles/2025/08/19/mit-report-finds-most-ai-business-investments-fail-reveals-genai-divide.aspx), August 2025: preliminary, not peer reviewed. ## The turn, and the way out - NASA, [Aviation Safety Reporting System](https://en.wikipedia.org/wiki/Aviation_Safety_Reporting_System). - CISA, [CIRCIA final rule targeted for September 2026](https://www.hunton.com/privacy-and-cybersecurity-law-blog/cisa-plans-to-finalize-cyber-incident-reporting-regulations-in-september-2026); the slide gives the status as of the article and is to be checked on the day. - Verizon, [2025 Data Breach Investigations Report](https://www.verizon.com/business/resources/reports/2025-dbir-data-breach-investigations-report.pdf). - RiskMandate, [Agent Behaviour Policy](https://riskmandate.ai/abp.html) and [licence to operate](https://riskmandate.ai/licence-to-operate.html). - The Kit Bag plan, [on sgit.ai](https://sgit.ai/demos/vaults/kit-bag/index.html): thirteen things beyond its purpose, four stopped by the platform. --- *[Site index for agents](../llms.txt) · [HTML version](https://the-ultimate-insider.presentation.sgit.ai/sources/index.html)*