CISOs Face Rising AI Security Risks Amid Improved Cyber Resilience

• •61% of CISOs believe their organization is at risk of a material cyberattack, down from 76% in 2025.
• •79% of CISOs identify human risk as their biggest cyber vulnerability, an increase from 66% last year.
• •78% of CISOs view generative AI as a major security risk, with 85% prioritizing its safe use.

The 2026 Voice of the CISO report from Proofpoint reveals that while cyber resilience is improving, Chief Information Security Officers (CISOs) are facing increased responsibilities related to AI security. The report indicates a decline in the perceived risk of material cyberattacks, from 76% in 2025 to 61% in 2026, and a decrease in reported material data loss from 66% to 53%. However, human risk is now viewed as the largest vulnerability by 79% of CISOs, up from 66% last year. Furthermore, 78% of CISOs consider generative AI (GenAI) a significant security risk, with 85% prioritizing the safe use of AI tools. Despite these challenges, 79% of CISOs are expected to manage AI-related risks without a proportional increase in resources or expertise. The report highlights a growing alignment between CISOs and corporate boards on security issues, although excessive pressure remains on CISOs regarding operational and reputational risks.