Top takeaways

• General:
  • 57% of participants report being ‘always connected’ to the internet
  • 45% felt information on how to stay secure online is confusing
  • 55% concerned about foreign states using apps to threaten their security or privacy
  • Less than half of participants who completed training reported making critical security changes
• AI:
  • 65% of participants now reporting they use AI
  • 43% of workers admitted to sharing sensitive work information with AI tools without their employer's knowledge
  • 65% felt AI will make it easier for cybercriminals to impersonate others
  • 52% of employed participants reported they have not received any training on the security or privacy risks of AI tools‍
    

• ...and much more — including fresh insights on online security perceptions, password habits, MFA adoption, and biometric usage. You won’t want to miss it!

‍

‍Report summary

How much do people worry about online safety? And, more to the point, do their concerns align with how they behave?

Who’s most likely to spill secrets to AI, and who’s avoiding security training like it’s trying to sell them a timeshare?

Maybe you’ve pondered the biggest question of all: Exactly how does all of this impact cybersecurity risk?

CybSafe teamed up with the National Cybersecurity Alliance to create The Annual Cybersecurity Attitudes and Behaviors Report 2025-2026, or as it’s known round here, Oh, Behave! It’s the result of digging deep into the online behaviors and beliefs of thousands of people across the globe.

The 2025/26 report is crammed with insights you can’t afford to miss. It reveals hidden patterns, fascinating trends, and provides actionable recommendations to help you protect your organization.

‍

This report covers:

• How employees use, and share information with, GenAI tools
• How workforces around the globe perceive and react to security awareness activities
• How organizations, policy makers, and practitioners can better encourage secure user behavior

‍

This report is for:

• Security awareness & Human risk management professionals
• CISOs, CTOs, and CIOs
• IT Directors, IT Managers, and Data protection officers‍
• Anyone tasked with running Security awareness or Human risk management programs

‍

Authors

Dr Suzie Dobrontei

Behavioral Scientist, CybSafe

‍

Suzie is a chartered social psychologist, tech enthusiast, former university lecturer, and CybSafe Behavioral Scientist.

She’s researched and taught social processes, group dynamics and human factors in cyber security for eight years.

Suzie is the lead author for The Annual Cybersecurity Attitudes and Behaviors Report 2025-2026.

‍

‍

‍

Dr Jason Nurse

Director of Science and Research, CybSafe

‍

Jason is the Director of Science & Research at CybSafe, and an Associate Professor in Cyber Security at the University of Kent.

At CybSafe, Dr Nurse leads a team of behavioral scientists and researchers responsible for ensuring that the company’s product is grounded in scientific evidence and empowers users to make smarter security decisions and build better habits.

‍

‍

Liza Plaggemier

Executive Director, The National Cybersecurity Alliance

‍

Lisa Plaggemier is Executive Director at the National Cybersecurity Alliance. She is a recognized thought leader in security awareness and education with a track record of engaging and empowering people to protect themselves, their families, and their organizations.

Lisa has worked as an international marketer with Ford Motor Company, Director of Security Culture, Risk and Client Advocacy for CDK Global, Chief Evangelist at InfoSec, and Chief Strategy and Marketing Officer at MediaPRO.

‍

‍

‍Oz Alashe MBE

CEO & Founder, CybSafe

‍

Oz leads CybSafe. He has been the driving force behind CybSafe – the concept, vision and platform.

A former UK Special Forces Lieutenant Colonel, Oz is focused on making society more secure by helping organizations address the human aspect of cyber security.

‍