Halloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsSlow PC?RecommendedPC slow today? Run a repair scan before it gets worseResolve common Windows issues and optimize system performance.Scan NowHalloween DealsAmazon USOctober picks are moving - compare before checkoutAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
World desk4 min

AI Cyberattacks: The Readiness Gaps Putting Businesses at Risk

AI does not make a business cyber catastrophe inevitable, but it can change the speed and scale of some threats. Here are the readiness gaps businesses should address.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

AI does not make a business cyber catastrophe inevitable. It can make some malicious tasks faster and less labor-intensive, while AI agents introduce risks tied to their access and autonomy. The clearest warning is a readiness gap: in the UK’s 2025/2026 Cyber Security Breaches Survey, only 24% of businesses using, adopting or considering AI said they had processes to manage its cybersecurity risks.

What the evidence says—and what it does not

The FBI says AI can automate tasks that previously required more time, effort and labor. That describes a way attackers could change the speed or scale of some work; it is not evidence that AI has already caused a wave of business catastrophes or that one is imminent.

As an Amazon Associate I earn from qualifying purchases.

The UK Department for Science, Innovation and Technology’s Cyber Security Breaches Survey 2025/2026 measures cyber activity generally, not AI-attributed attacks. Its findings are UK-specific, self-reported survey results—not global rates or independent audits of security controls.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
UK survey finding What it measures
43% of businesses reported identifying a cyber breach or attack in the previous 12 months. Incidents identified and reported by businesses; not specifically AI-enabled attacks.
38% of businesses reported phishing in the previous 12 months. Phishing activity generally, not phishing attributed to AI.
24% of businesses using, adopting or considering AI reported having processes to manage cybersecurity risks from AI. Reported processes in that AI-related subgroup; the remaining businesses cannot be assumed to have experienced an AI-related breach.
47% of businesses reported using two-factor authentication. Reported adoption of a common identity safeguard; this does not establish that every account is protected.

The survey’s headline risk-identification activities used a base of 2,112 businesses and 1,085 charities. It also cautions that it captures incidents organizations identified and were willing to report, so unidentified or undisclosed incidents may be missed. No reviewed source establishes a reliable estimate of business losses specifically caused by AI-enabled cyberattacks.

How AI can change the risk to a business

More work can be done with less effort

AI’s security significance is not that it invents every attack method. Rather, automation can reduce the effort required for some malicious tasks, potentially changing how quickly or broadly they can be attempted. The FBI describes this as a change in the threat landscape and notes that wider public and private adoption also expands the AI and machine-learning attack surface.

Phishing is a relevant business concern because it was reported by 38% of UK businesses in the survey. That figure is not an AI-phishing rate. The practical point is to keep protections for messages, accounts and staff in place without assuming that an AI tool caused a particular incident.

Agents add risks through permissions and connections

An AI agent that can use tools, access business data or take actions raises a different set of questions from a system that only generates text. CISA and partner agencies’ May 1, 2026 guidance identifies agentic-AI risks including “privilege escalation, emergent behaviors, and accountability gaps.” These concerns apply to agentic systems and should not be generalized to every generative AI service.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

For any AI system, assess what it can access, how much autonomy it has, whether its actions are logged, who controls its identity and permissions, how changes are reviewed, and whether response and recovery plans cover it. Those questions are more useful than treating “AI security” as a single product category.

Why ordinary readiness still matters

AI-specific governance does not replace basic cybersecurity. In the same UK survey, small businesses reported the following preparedness measures:

Measure among small businesses 2025/2026 2024/2025
Cyber risk assessment 41% 48%
Formal cyber policy 52% 59%
Continuity plan covering cyber risk 44% 53%

These are survey findings, not a diagnosis of any individual company. They do show why AI should be added to existing risk and continuity work rather than handled as a separate technology issue. A business that cannot identify its important systems, assign responsibility or recover from a cyber incident has limited basis for managing new AI-related risks.

What to do before using AI or AI agents

  1. Inventory AI use. Record approved services, employee use, integrations, connected data and any agents that can take actions. Note who owns each use and what business purpose it serves.
  2. Apply existing governance. Include AI in risk assessment, security policy and continuity planning. NIST’s AI Risk Management Framework 1.0 is voluntary, and NIST says it is being revised; check NIST’s current materials and relevant profiles before adopting detailed framework language.
  3. Limit access and autonomy. Give an agent only the permissions needed for its assigned task. Avoid broad access to sensitive data or critical systems, and keep a named person responsible for consequential actions.
  4. Strengthen identity and layered defenses. Control identities and permissions, use layered safeguards, monitor activity and reassess systems when capabilities or integrations change. A hardware security key may be one way to strengthen account authentication where it is compatible and appropriate, but no one method fits every organization.
  5. Test and review changes. Threat-model the system before deployment, check what it can do with connected tools and data, and review its behavior and access after meaningful changes. Maintain records that help establish who or what took an action.
  6. Prepare response and recovery. Make sure incident procedures cover the AI service and its connections. CISA’s business resources offer free cyber guidance and voluntary baseline practices; verify current availability and local applicability.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

If an incident occurs

Use the organization’s incident-response process, preserve relevant logs and other evidence, and escalate to appropriate internal responders and authorities. For an AI agent, include its connected services and access in the investigation so responders can determine what it could reach and what actions were recorded. No checklist or tool eliminates risk; preparation helps a business make decisions and recover when controls fail.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
Outdated Drivers Are Slowing You DownFree scan - exact matches
PC Slower Than It Used to Be?Free scan - under a minute

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.