A new report from Red Hat reveals that 97% of organizations experienced at least one cloud-native security incident in the past year, highlighting significant maturity gaps and an urgent need for automation.

• 78% of incidents were due to misconfigured infrastructure, with 74% of organizations delaying deployments due to security concerns.
• Despite 56% of organizations describing their posture as "highly proactive," only 39% possess a mature, well-defined cloud-native security strategy.
• Organizations are prioritizing investment in DevSecOps automation (over 60%) and software supply chain security (56%) for 2026, driven in part by upcoming regulations like the EU Cyber Resilience Act.