Cybersecurity professionals are sounding the alarm when it comes to a their top security concern: human distraction.

New research from KnowBe4 surveyed more than 100 security professionals to gauge the current state of cybersecurity concerns.

The research found that, despite rising sophistication of threats and the emergence of malicious uses of AI, the human factor is causing the most distress among cyber professionals.

Human distraction (43%) and a lack of security awareness training (41%) were identified as the primary reasons employees fall victim to cyber-attacks rather than attack sophistication.

Still, phishing dominated as the leading threat (74%), with impersonation of executives or trusted colleagues being the most common tactic. AI-generated threats are not yet dominant, but these fears are growing.

With fears around the human factor persisting and AI threats on the rise, 65% of organisations plan to increase cybersecurity budgets, with top investment areas including email security and security awareness training.

However, there is a disconnect between perceived effectiveness of AI-based tools – 32% believe it has the greatest impact – and their prioritisation for funding (26%).

Six in ten (60%) organisations fear the rise of AI-generated threats, suggesting preparation for future threats while still dealing with current human risks.

Nearly 90% of respondents express confidence in their ability to respond to cyber-attacks, which appears inconsistent with breach frequency and known vulnerabilities. This overconfidence is considered a risk in itself.

Recommended reading

• Ransomware Attacks Up 73% in January 2024 Year-on-Year
• CTOs: Human Error Is the Biggest Cyber Threat
• NCSC Warns Ransomware Threat to Rise with AI

“Cyber risk is not just about advanced technology; it is about human bandwidth and the cognitive load of today’s fast-paced digital workplace,” said Javvad Malik, lead cybersecurity awareness advocate at KnowBe4.

“The findings highlight that bridging the gap between perceived value and investment in integrated human risk management is crucial.

“Overconfidence, a risk in itself, further underscores the need to validate defences and support employees in making secure decisions amidst distractions, especially as we prepare for the rising tide of AI-generated threats.”