CISOs Report Surge in Deepfake Social Engineering Incidents

• •41% of CISOs reported deepfake incidents in audio calls over the past year.
• •79% experienced email phishing incidents, indicating a broader trend in social engineering.
• •Gartner recommends updating incident response playbooks to address AI-driven threats.

A Gartner survey reveals that 41% of CISOs experienced social engineering incidents involving deepfakes during audio calls, while 36% reported similar incidents in video calls over the past year. The survey, conducted with 297 cybersecurity leaders, highlights that AI is enhancing the volume and credibility of these attacks, making traditional detection methods less effective. Additionally, 79% of CISOs reported email phishing incidents, and 58% noted vishing or smishing incidents. To combat these threats, Gartner recommends that CISOs update their incident response playbooks and shift training towards secure verification practices. The findings were presented at the Gartner Security & Risk Management Summit in London on September 22, 2026.