Loading story…
The 2025 Insider Risk Report, produced by Cybersecurity Insiders in collaboration with Cogility, reveals that a vast majority of organizations find insider threats as difficult or even more challenging to detect than external cyberattacks. According to the report, 93% of surveyed security leaders acknowledge the complexity of identifying insider risks, yet only 23% express strong confidence in their ability to prevent such threats before significant damage occurs. The findings highlight a critical gap in proactive defense, with most organizations remaining reactive despite the growing risks posed by AI-driven threats and decentralized workforces.
The report, based on a survey of 635 CISOs and cybersecurity professionals, underscores that only 21% of organizations integrate non-technical signals—such as HR data, financial stress, or psycho-social indicators—into their insider risk detection programs. Furthermore, just 12% have implemented mature predictive risk models, leaving the majority vulnerable to sophisticated insider attacks. Experts warn that without adopting behavioral intelligence and predictive analytics, organizations risk being blindsided by trusted insiders exploiting new technologies, potentially leading to severe data breaches and reputational harm.
See attribution, scope, and your downstream exposure.
1 event from the most recent confirmed update back to the earliest known activity.
A 2025 Insider Risk Report was published, finding that most organizations struggle to detect and predict insider risks. The two references appear to report the same publication rather than separate events.
See attribution, scope, and whether this vendor sits anywhere in your supply chain.
2 references tracked. Mallory keeps watching after this page renders.
securityonline.info
Open sourcehackread.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
CISA has revised its **Insider Threat Mitigation Guide** with updated case studies, statistics, and resources to help security, HR, and organizational leaders build or assess insider-risk programs at any maturity level. The guidance addresses risks created by hybrid and remote work, adverse employee separations, and AI-enabled manipulation and deception, while broadening its scope from data protection to physical security, violence prevention, access control, and visitor screening. The agency urges organizations to identify behavioral warning signs and improve preparedness and early-risk detection because trusted users, contractors, vendors, machine identities, and AI agents can misuse, compromise, or unintentionally expose organizational assets through otherwise legitimate credentials and workflows. Recommended measures include least-privilege and just-in-time access, identity and behavioral analytics, governance for non-human identities, adaptive controls for high-risk actions, data-loss prevention, and continuous security education.
Sep 10, 2026
Chief Information Officers (CIOs) and Chief Information Security Officers (CISOs) are facing unprecedented challenges as they prepare for 2025, with cybersecurity emerging as the top concern for 41% of CIOs according to the Experis Future Forward: CIO 2025 Outlook report. Organizations are responding by planning significant increases in cybersecurity budgets, with 77% of surveyed companies intending to boost security spending in the coming year. Alongside this, there is a parallel push to expand cloud infrastructure (68%) and accelerate artificial intelligence (AI) capabilities (67%), reflecting the dual imperative to innovate while defending against evolving threats. However, the Bitdefender 2025 Cybersecurity Assessment Report reveals a troubling trend: 58% of security professionals have been instructed to keep breaches confidential, a 38% increase since 2023, raising concerns about transparency, compliance, and stakeholder trust. The pressure to remain silent is particularly acute for CISOs and CIOs, highlighting a growing disconnect between leadership and frontline security teams. The reports also underscore a critical skills gap, with 76% of IT employers struggling to find qualified tech talent, prompting 52% of tech leaders to embed AI skills into existing roles rather than create new positions. Attack surface management has become a top priority for 68% of organizations, driven by the rise of Living Off the Land (LOTL) attacks, which now account for 84% of high-severity incidents and exploit legitimate tools within enterprise environments to evade detection. Proactive measures such as disabling unnecessary services, removing unused applications, and limiting lateral movement are increasingly seen as essential. The relationship between CIOs and other C-suite executives, particularly the COO, is identified as crucial for effective risk management and operational alignment. Despite increased investment, 56% of IT leaders believe that senior leadership lacks sufficient understanding of the CIO role and its responsibilities, potentially hindering effective cybersecurity governance. AI is both a source of optimism and concern, with 67% of leaders believing in its transformative potential, but there remains a gap between perception and practical implementation. Internal audit teams are adapting to these risks by reassessing their approaches to cybersecurity, AI, and economic uncertainty. Burnout among middle management and the need for improved board-level engagement are also highlighted as factors influencing organizational resilience. The combined findings from Experis and Bitdefender illustrate a landscape where technology leaders must balance innovation, risk management, and transparency to safeguard their organizations in an era of relentless cyber threats and rapid digital transformation.
Jun 29, 2026
Security leaders are increasingly concerned about the risks posed by both human insiders leveraging AI tools and the rise of autonomous AI agents within organizations. Employees, including senior staff, are frequently using unapproved AI services to accelerate their work, inadvertently exposing sensitive data and creating compliance gaps that may go undetected by security teams. Additionally, hostile actors are exploiting AI to fake credentials, gain trusted roles, and move laterally within corporate networks, further complicating insider risk management. At the same time, the rapid adoption of AI agents is transforming the insider threat landscape, with predictions that 40% of enterprise applications will integrate task-specific AI agents by the end of 2026. While these agents can help address cyber-skills shortages and automate security tasks, they also introduce new risks as potential insider threats themselves. Security teams face mounting pressure to quickly vet and secure these technologies, balancing the benefits of increased productivity and strategic defense with the need for robust oversight and risk mitigation.
Jun 29, 2026