AI-driven cyber threats top concern for Europe’s IT sector by 2026

More than half of European IT and cybersecurity professionals believe that AI-driven cyber threats and deepfakes will be the primary cause of concern for the sector in 2026, according to new research from ISACA.

The Cybersecurity Trends and Predictions 2026 report from ISACA, an association for IT and cybersecurity specialists, shows 51% of professionals fear threats associated with artificial intelligence (AI) will cause significant worry in the coming year. Despite this, only 14% of respondents say their organisations are 'very prepared' to manage the risks arising from generative AI, while 82% feel only somewhat, not very, or not at all prepared.

Alongside AI-related worries, cybersecurity personnel indicated a number of other concerns, including regulatory complexity and compliance risks (38%), supply chain vulnerabilities (37%), and failures to detect and respond to breaches that could result in irreparable harm to businesses (35%). The issue of ransomware readiness was also highlighted as only 7% of respondents reported being extremely confident in their organisation's ability to navigate a ransomware attack in 2026.

AI: Risk and opportunity

Despite apprehension over AI-driven threats, digital trust professionals also view AI as a significant opportunity. The survey found 61% believe generative AI and large language models will be the principal technology trends shaping their work in 2026, followed by AI and machine learning for predictive analytics (57%).

When asked about the most significant cyber threats facing organisations, nearly two-thirds (59%) identified AI-driven social engineering. Insider threats, whether intentional or accidental, were named by 29% as a notable risk.

Organisational resilience remains a focus, with 64% calling business continuity and resilience very important for 2026. However, the research identified a gap in planning for digital trust, as 27% of organisations have no intention to hire more staff for roles such as audit, risk, and cybersecurity in the next year.

"AI represents both the greatest opportunity and the greatest threat of our time. This research highlights a stark reality: while organisations are beginning to embrace AI's transformative potential, many remain underprepared to manage its risks in the year ahead," said Chris Dimitriadis, Chief Global Strategy Officer at ISACA. "AI cybersecurity and assurance certifications will help cyber professionals manage the evolving risk related to AI, implement policy, and ensure its responsible and effective use across the organisation."

Legislative challenges

ISACA's research also points to regulatory issues as a major concern for cybersecurity professionals. Although 38% cite regulatory complexity and compliance risks as a chief worry, a significant proportion-79%-agree or strongly agree that cyber-related regulation will improve digital trust. Furthermore, 53% agree or strongly agree that regulatory measures will contribute to business growth.

According to ISACA, better understanding regulatory changes and the potential opportunities could help professionals navigate compliance and enhance organisational resilience. Chris Dimitriadis commented on this point:

"Many of the concerns the respondents raise signal an opportunity to transform how we approach these issues, shifting them from worries to a catalyst for business growth," Dimitriadis continued. "For example, when regulation or guidance is viewed not just as a box-ticking exercise but as an opportunity to innovate in a resilient manner in the long term."

Staffing and preparedness

The survey further found a gap in hiring, as less than half of organisations intend to expand their digital trust or cybersecurity teams to manage anticipated threats. ISACA suggests that preparing staff to operate AI securely, as well as training teams to respond to AI-driven cyber incidents, will be essential to supporting business resilience in the coming year.

This research is based on a survey conducted with 632 digital trust professionals across Europe, with fieldwork occurring between August and September 2025.