The latest Global Cybersecurity Outlook 2026 from the World Economic Forum indicates that the world is facing a critical period in digital history. Cybersecurity leaders from 92 countries participated in the survey, revealing that the threats in 2026 are evolving significantly and posing substantial risks.
Artificial intelligence (AI) is identified as the primary driver of change in cybersecurity this year, with 94% of cybersecurity leaders globally in agreement. Both defenders and attackers are leveraging AI technology – defenders to detect threats faster and reduce risks, and attackers to create more sophisticated attacks.
Research shows that AI-related vulnerabilities are the fastest-growing cyber risk for organizations, with 87% of them highlighting this concern in 2025. Attackers are now using AI to craft phishing emails that closely resemble legitimate communications, as well as creating convincing fake voices and videos to deceive individuals into disclosing sensitive information.
In a groundbreaking development in November 2025, researchers observed an autonomous AI system executing a full cyber espionage operation independently. The AI system identified targets, exploited vulnerabilities, gathered valuable data, and transmitted it back to its operators without human intervention.
Despite the increasing awareness, a significant portion of organizations (over one-third) are deploying AI tools without ensuring their security, exposing themselves to risks. Business executives are particularly concerned about data leaks through generative AI systems, fearing unintentional exposure of sensitive company information.
While business leaders worry about sophisticated AI attacks, ordinary individuals are increasingly falling victim to cyber fraud. Approximately 73% of survey respondents either experienced cyber fraud personally or knew someone who did, indicating a widespread impact.
Phishing schemes remain the most common form of attack, with scammers using fake emails, texts, or voice messages to deceive individuals into revealing confidential information. Fraudsters have evolved their tactics to intercept business transactions, issue fake invoices, and engage in identity theft, affecting people globally.
Fraud has transitioned from being primarily a consumer issue to a significant concern for business leaders, surpassing ransomware as the top cyber risk. Cybercriminals have professionalized their operations, offering cybercrime-as-a-service platforms for easy access to attack tools.
Geopolitics now plays a pivotal role in organizations’ cybersecurity strategies, with 64% considering geopolitically motivated cyberattacks in their security planning. Companies are making strategic decisions on technology vendors, operational locations, and infrastructure based on geopolitical factors.
The report also highlights the growing focus on third-party and supply chain vulnerabilities, with 65% of large companies citing this as their primary cybersecurity challenge. Industries like automotive faced severe disruptions, as seen in the Jaguar Land Rover attack, emphasizing the need for comprehensive supply chain mapping and incident simulations.
There is a concerning gap between organizations prioritizing cyber resilience and those lagging behind, especially among small and public sector organizations. The persistent skills shortage in critical cybersecurity roles remains a significant barrier to building effective cyber defenses.
Looking ahead to 2030, emerging threats such as autonomous systems, digital currencies, undersea cables, and quantum computing pose unprecedented challenges to global cybersecurity. Despite the accelerating threats, optimism remains that achieving cyber resilience is possible through prioritizing security as a strategic imperative, investing in people alongside technology, and fostering collaboration in an interconnected world.
