Gen Z, millennials are ‘weak link’ as AI fuels new cyberattack workplace threats

This story was first published by Digiday sibling WorkLife

New research from EY reveals a growing cybersecurity anxiety among U.S. employees, with younger generations particularly vulnerable to sophisticated AI-powered attacks. 

Experts emphasize the need for engaging and tailored training programs and a culture of cyber awareness to combat evolving threats.

A survey of 1,000 workers in the U.S. by EY paints an alarming picture of the cybersecurity landscape. More than half (53%) of employees fear their organization will be targeted by cybercriminals, with about one-third (34%) worried their own actions could be the weak link. This anxiety is particularly acute among Gen Z and millennials, who feel less equipped to navigate the increasingly complex world of cyber threats compared to their older counterparts.

“The risk landscape has become incredibly complex,” says Jim Guinn II, EY Americas Cybersecurity leader. “Geopolitical tensions, constantly evolving regulations, and the rapid integration of new technologies, especially AI, all contribute to this challenge.” The study found that 85% of employees believe AI has made cyberattacks more sophisticated, with 78% expressing concerns about its use in malicious activities.

The EY survey highlights a stark generational divide in cybersecurity preparedness. Gen Z, despite being digital natives, are losing confidence in their ability to identify phishing attempts, one of the most common cyberattack tactics. Only 31% feel very confident in spotting these threats, a significant drop from 40% in 2022. This vulnerability is further emphasized by the fact that 72% admit to clicking on suspicious links at work, a figure significantly higher than other generations.

This lack of awareness translates into heightened anxiety. Nearly two-thirds of Gen Z and millennial employees fear losing their jobs if they were to compromise their organization’s security. This apprehension is compounded by a lack of clarity regarding reporting protocols for suspected cyberattacks, with younger generations significantly less likely to understand their company’s procedures.

Despite these concerns, the data provides a silver lining. Gen Z, while less confident in their abilities, are increasingly knowledgeable about cybersecurity. This presents a crucial opportunity for organizations to invest in upskilling and training programs tailored to their experiences as digital natives.

To read the full story click here

More in Media

‘The net is tightening’ on AI scraping: Annotated Q&A with Financial Times’ head of global public policy and platform strategy

Matt Rogerson, FT’s director of global public policy and platform strategy, believes 2026 will bring a kind of reset as big tech companies alter their stance on AI licensing to avoid future legal risk. 

Future starts to sharpen its AI search visibility playbook

Future is boosting AI search citations and mentions with a tool called Future Optic, and offering the product to branded content clients.

Digiday’s extensive guide to what’s in and out for creators in 2026

With AI-generated content flooding social media platforms, embracing the messiness and imperfection of being human will help creators stand out in the spreading sea of slapdash slop.