Picus measured how effectively existing security controls prevented attacks and whether simulated malicious activity generated logs and alerts. Improved security logging is not translating into better alerting , as the log score rose to 58% while the alert score remained at just 14%. All 10 of the least-prevented ransomware families had prevention scores of 38% or lower, while their average prevention score declined from approximately 44% in 2025 to 32% in 2026.