WEF: CEOs Shift Focus to Industrialized Fraud, Citing AI Risks as Fastest-Growing Threat
World Economic Forum data shows executive concern has shifted from ransomware to industrialized cyber-enabled fraud and phishing attacks.
Key points
- CEOs now prioritize cyber-enabled fraud over ransomware as their primary security concern.
- % of survey respondents reported personal exposure to cyber-enabled fraud in 2025.
- % of respondents identify AI-related vulnerabilities as the fastest-growing risk.
World Economic Forum executives report that cyber-enabled fraud has surpassed ransomware as the leading concern for chief executives in 2026. This shift reflects a broader transformation in how organizations perceive digital threats, driven by the industrialization of fraud schemes and the accelerating impact of artificial intelligence on attack speeds.
Why has executive concern shifted away from ransomware?
The Global Cybersecurity Outlook 2026, released by the World Economic Forum, indicates that CEOs now rank cyber-enabled fraud and phishing above ransomware. Akshay Joshi, Head of the Centre for Cybersecurity at the forum, attributes this change to the scale at which fraud has become embedded in daily operations. The report notes that 73% of respondents said they or someone in their network was personally affected by cyber-enabled fraud in 2025, while 77% reported an increase in such incidents.
How does artificial intelligence influence this risk landscape?
AI is accelerating both cyber offense and defense, shifting operations from human-paced activities to autonomous, machine-speed actions. According to the forum’s research, 87% of respondents identify AI-related vulnerabilities as the fastest-growing cyber risk. Frontier AI models are reshaping the capabilities available to attackers and defenders, altering how leaders approach security governance and oversight in an environment where speed and control have changed significantly.
What structural gaps are widening between organizations?
Joshi explains that a resilience gap is widening between large and small organizations, as well as between different regions. This disparity is exacerbated by skills shortages and the need for public-private cooperation to work at scale. The report suggests that geopolitical fragmentation is increasing systemic exposure, requiring better governance and stronger collaboration across technology companies, financial institutions, telecommunications providers, governments, and law enforcement to address these structural weaknesses.
What operational changes are required to address these threats?
Addressing cyber-enabled fraud requires leaders to look beyond protecting their own internal networks. The forum advises strengthening prevention, response, and collaboration across multiple sectors. Because fraud directly affects customers, employees, and organizations, it erodes trust in the digital economy. Leaders must integrate geopolitics and the cyber resilience gap into their threat models, recognizing that emerging technology can be a source of resilience if governed correctly.
Background: Phishing
This checklist provides actionable technical controls to stop phishing. It covers email authentication, identity hardening, and endpoint detection. Implement these measures to reduce reliance on user training and close common infrastructure vulnerabilities that attackers exploit.
Read the full guide: Phishing Prevention Checklist for Technical Defenses
What to do and how to stay safe: World Economic Forum
- Review current threat models to ensure cyber-enabled fraud and phishing are prioritized alongside traditional ransomware risks.
- Assess internal processes for AI-related vulnerabilities, given that 87% of respondents view this as the fastest-growing risk.
- Establish or strengthen collaboration channels with financial institutions, telecom providers, and law enforcement to improve incident response.
- Evaluate the resilience gap between large and small entities within your supply chain to identify potential weak points.
Step-by-step guide: Spear Phishing Risks for Small Teams: Technical Defenses
General security guidance from the TechSec Feed newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
What is the top cyber concern for CEOs in 2026?
CEOs now rank cyber-enabled fraud and phishing as their top concern, ahead of ransomware.
How many people were affected by cyber-enabled fraud in 2025?
73% of respondents said they or someone in their network had been personally affected by cyber-enabled fraud in 2025.
What is the fastest-growing cyber risk according to the WEF?
87% of respondents identify AI-related vulnerabilities as the fastest-growing cyber risk.




