The Sixth Voice of the CISO Data Shows Cyber Risk Has Moved Inside the Workflow

Summary: Proofpoint's five-year Voice of the CISO series, drawing on 1,600 global CISOs, shows the share who call GenAI a security risk rising from 54% in 2024 to 60% in 2025 and 78% in 2026, while 78% now say their organization blocks or restricts employee GenAI use, up from 59% in 2025. The 2026 findings also show 79% of CISOs expected to manage AI-related risks without a proportional increase in resources or expertise, 79% citing human risk or error as the biggest vulnerability, and 93% of organizations that suffered material data loss saying departing employees played a role.
What you should know: Nearly four in five CISOs are being handed AI risk with no matching budget or headcount, and blocking tools is not governance once assistants and agents sit inside the workflow. The 93% figure tying departing employees to material data loss puts the exposure at the intersection of identity, permissions, and offboarding rather than in awareness training.

Read the original at The Hacker News ↗