Keypoint Intelligence’s Cybersecurity page
We believe digital innovation must always be paired with strong and proactive cybersecurity measures. The newly released “Oh, Behave!” Annual Cybersecurity Attitudes and Behaviors Report 2025-2026 from CybSafe and the National Cybersecurity Alliance offers a striking snapshot of how people are adapting to new technologies and, more importantly, where gaps in behaviour continue to put organizations at risk.
The AI Adoption Paradox
Artificial intelligence (AI) is now a core part of everyday work and life. About 65% of participants in the study reported using AI, which is up from just 35% the year before. Younger generations lead the way, with 89% of Gen Z and 79% of Millennials embracing AI in personal and professional settings.
 |
Source: Oh, Behave! The Annual Cybersecurity Attitudes and Behaviors Report 2025-2026 (cybsafe.com) |
Yet safeguards are failing to keep pace. Over half of employees (52%) report never having received training on AI-related security or privacy risks, while 43% acknowledge sharing sensitive company data with AI tools without their employer’s approval. This behaviour (particularly common among younger staff) underscores the growing “shadow AI” problem, where rapid adoption runs ahead of governance and increases organizational exposure.
 |
Source: Oh, Behave! The Annual Cybersecurity Attitudes and Behaviors Report 2025-2026 (cybsafe.com) |
Confidence vs. Reality
Confidence in handling AI-generated content is growing, but risky behaviour persists. Nearly half of respondents (48%) feel sure they can spot AI-created text or images. However, 63% also worry about AI-enabled cybercrime and two-thirds believe criminals will exploit the tech to bypass security systems.
 |
Source: Oh, Behave! The Annual Cybersecurity Attitudes and Behaviors Report 2025-2026 (cybsafe.com) |
The data suggests this confidence is often misplaced: 44% of people reported falling victim to cybercrime in the past year (a 9% increase). Phishing and identity theft remain leading threats, while one in three participants said they have already been targeted by deepfake scams.
The Value (and Challenge) of Cybersecurity Training
Training is supposed to bridge the gap between knowledge and action, but access remains inconsistent. Only 32% of people had access to and used cybersecurity training, while more than half (55%) reported having none whatsoever. The shortfall is particularly severe in industries such as retail, hospitality, and the arts. Among those who do receive training, video is the most popular format, and most participants (83%) described the sessions as useful.
 |
Source: Oh, Behave! The Annual Cybersecurity Attitudes and Behaviors Report 2025-2026 (cybsafe.com) |
But usefulness doesn’t always translate into stronger habits. Less than half reported changing behaviours as a result, with measurable improvements in only a few key areas:
- 47% became better at spotting phishing
- 42% started using multi-factor authentication
- 40% adopted stronger passwords
The biggest barriers to training uptake were lack of time (21%) and doubts about whether it reduces risk (20%).
Everyday Security Habits
The report also examined basic cybersecurity practices that can make or break resilience. The findings show that progress is uneven. On the positive side, 60% of people update their software and 49% back up important data. Yet only 62% use unique passwords across accounts, and 41% have never tried a password manager. Regular use of multi-factor authentication sits at 41%, leaving a large share of users dependent on single-password protection. This gap between knowledge and practice is particularly visible among younger generations, who feel confident in their skills but often skip the fundamentals of good cyber hygiene.
The Path Forward
Encouragingly, most employees see cybersecurity as a priority where they work. Around 70% said their organizations treat it as such, and that senior leadership takes risk management seriously. At the same time, nearly half of respondents identified internal personnel (whether careless or malicious) as the greatest ongoing risk to IT security. Ultimately, bridging the gap between innovation and security comes down to building a culture of awareness and responsibility, because technology alone isn’t enough.
You can find the complete report here.
Stay ahead in the ever-evolving print industry by browsing our Industry Reports page for the latest insights. Log in to the InfoCenter to view research on cybersecurity and AI through our Workplace CompleteView Advisory Service. Not a subscriber? Contact us for more information.