Security gaps are widening with the advent of AI-driven cybercrime, with the tech fuelling a new wave of threats that most businesses are ill-equipped to defend against, new research from Lenovo has found.

According to the tech giant’s latest report, Reinforcing the Modern Workplace, 65% of IT leaders admit their defences are outdated and unable to withstand AI-enabled attacks, with just 31% confident in defending against them. 

Polling 600 IT leaders from around the world, including in the UK, Lenovo found growing alarm over the use of AI by threat actors, with 6% identifying it as a top security risk, and a striking 90% doubtful of their ability to counter emerging threats.

But while the advance of genAI has supercharged cybercriminal strategies and allowed for hyper-agile attacks, IT leaders are also left to contend with its disruptive impact inside their own organisations.

Lenovo’s study found that more than six in ten now agree that AI agents are posing a new kind of insider threat they are not yet equipped to face, while almost half (48%) cite staff use of public AI tools as a core cyber risk, an issue that 70% of IT leaders agree must be addressed.

The report also found that those on the frontlines are fairly blunt in their assessment of their firm’s defensive abilities.

More than half (54%) believe their current data protection tools, processes, and team capabilities fall short when it comes to tackling AI-driven cybersecurity threats, despite 83% rating this as of critical importance in the current landscape.

Recommended reading

• Is AI Over-Influencing Cybersecurity Decisions?
• Cybersecurity Teams Push Back on AI Hype Over Privacy Concerns
• Are Cybersecurity Teams Safe from the AI Axe?

Meanwhile, confidence in vulnerability and threat analysis is even lower, with 65% of IT leaders acknowledging their current capabilities are not able to address AI-enabled threats, with around the same number (60%) saying that their incident detection and response is not up to scratch.

To make a shift to AI-driven protection, Lenovo said that firms need a two-pronged approach that enhances detection and embeds AI directly into their defences, building a holistic approach supplemented by versatile tools and experienced partners.

“AI has changed the balance of power in cybersecurity. To keep up, organisations need intelligence that adapts as fast as the threats. That means fighting AI with AI,” said Rakshit Ghura, VP and general manager at Lenovo Digital Workplace Solutions. 

“With intelligent, adaptive defences, IT leaders can protect their people, assets, and data while unlocking AI’s full potential to drive business forward.”