Deepfakes and Phishing Attacks Are Top AI-Powered Cybersecurity Threats in 2024
Deepfakes and Phishing Attacks:
The Top AI-Powered Cybersecurity Threats in 2025
Cybersecurity Budgets Surge Amid Rising AI Threats
As artificial intelligence continues to reshape the digital world, chief information security officers (CISOs) are grappling with a surge in AI-driven cyber threats. According to a new poll by Team8, phishing attacks and deepfake-enhanced fraud are now considered the two most pressing security concerns.
In this 2025 survey, 75% of CISOs identified phishing as the top threat, while 56% ranked deepfakes used in voice or video fraud as a major concern. These rising threats have prompted 70% of respondents to increase their cybersecurity budgets compared to the previous year.
Global Cybersecurity Spending Reaches New Heights
Supporting these findings, Gartner estimates that global spending on cybersecurity and risk management will reach a record $215 billion in 2024, a 14.3% increase from 2023.
Companies are now under pressure to invest not just in traditional security solutions, but also in tools designed to combat AI-enhanced attack vectors.
Skills Gap and Usability: Key Challenges in AI Defence
While budgets are rising, 58% of CISOs say a lack of AI-specific expertise is a major obstacle in securing new systems. At the same time, organisations are struggling to balance security with usability, often compromising on one to improve the other.
This highlights a growing gap in the cybersecurity workforce, especially in the context of rapidly advancing AI technologies.
Inside the CISO Mind: Team8’s 2024 Report
These insights are drawn from Team8’s 2024 CISO Village Report, which surveyed over 100 cybersecurity executives from top global firms such as Barclays and Oracle.
Team8, a venture capital firm focused on cybersecurity, digital health, and AI, says the findings shed light on the real-world challenges faced by security leaders today. The report emphasises how AI is redefining the risk landscape, making older strategies obsolete.
Legal Pressure Adds to CISO Stress
Beyond technical threats, liability concerns are now affecting the mental and emotional health of CISOs. Over 54% of those surveyed admitted that legal worries impacted their well-being, and 32% took active steps to mitigate personal legal risks.
These steps included hiring attorneys, revising contracts, or purchasing additional insurance coverage.
“The latest SEC rulings and increasing liability burdens have pushed CISOs into unfamiliar and complex legal territory,” explained Ross Young, CISO in Residence at Team8.
“This shift doesn’t just affect the individual. It impacts organisational resilience on a global scale.”
Key Threat Areas That Still Lack Solutions
Despite rising budgets and attention, several crucial areas still lack effective security solutions. Surveyed CISOs flagged these as ongoing concerns:
-
Insider threats and advanced DLP – 65%
-
Third-party risk management – 46%
-
AI application security – 43%
-
Human identity management – 40%
-
Security executive dashboards – 40%
This shows that many organisations are still unprepared for complex and evolving digital risks.
What’s Next? The Roadmap for AI Security Tools
Looking ahead, 41% of CISOs plan to explore AI development lifecycle management tools within the next two years. There is also growing interest in:
-
Third-party AI app data privacy tools – 36%
-
Shadow AI detection and mapping solutions – 33%
These forward-thinking investments are aimed at preventing data leaks, unauthorised access, and untracked AI deployments that could open doors for attackers.
Evolving with the Threat Landscape
The rise of AI-powered threats like deepfakes and phishing has transformed cybersecurity from a defensive task into a strategic priority. The 2024 Team8 CISO survey reflects not just a spike in spending but also a deep concern about legal risks, mental well-being, and AI’s double-edged role in enterprise security.
CISOs must now manage technical innovation, legal liability, and strategic planning, all while keeping pace with a threat landscape that changes by the day.
The future of cybersecurity will depend on how quickly organisations can adapt, train talent, and adopt AI responsibly, not just to defend, but to lead.