Gartner: GenAI has broken traditional cybersecurity awareness – what comes next?

Gartner: GenAI has broken traditional cybersecurity awareness – what comes next?

Gartner: GenAI has broken traditional cybersecurity awareness – what comes next?

https://www.techradar.com/pro/gartner-genai-has-broken-traditional-cybersecurity-awareness-what-comes-next

Publish Date: 2026-05-11 06:06:00

Source Domain: www.techradar.com

Cybersecurity awareness has long relied on a simple premise: educate employees, reduce risk. But in 2026, that model is no longer holding.

Alex Michaels

Social Links Navigation

Director Analyst at Gartner.

This highlights the gap between traditional awareness programs and modern cyber risk.

Latest Videos From

You may like

For security and risk management leaders, awareness alone is no longer enough.

The human risk surface is expanding

GenAI adoption has surged across organizations, with more than 86% now piloting or deploying these tools. What began as experimentation has quickly become embedded in day-to-day workflows, often without corresponding governance or oversight.

Employees are not waiting for formal approval. Many are turning to personal GenAI accounts for work tasks, inputting sensitive data into public tools, or downloading unapproved applications. This phenomenon, often described as “shadow AI,” is increasing employee-initiated cybersecurity risk.

According to Gartner’s 2025 Cybersecurity Innovations in AI Risk Management and Use Survey, over 57% of employees use personal GenAI accounts for work, and 33% admit to inputting sensitive work information into public or unapproved GenAI tools.

External threats are evolving as well. Deepfakes and advanced phishing attacks are becoming more sophisticated due to GenAI capabilities. The survey finds 35% of organizations have been affected by deepfake attacks, and AI-assisted phishing emails have doubled over the past two years, making some threats harder for employees to detect.

This…

Source