The latest deepfake numbers give CISOs plenty to worry about
Gartner survey of 297 CISOs finds 41% faced deepfake audio-call social engineering incidents and 79% faced phishing or BEC in the past year.
A Gartner survey of 297 senior cybersecurity leaders (March–May 2026) found 41% of CISOs reported at least one deepfake incident during an employee audio call and 36% during a video call in the past 12 months. 79% reported phishing, spear-phishing, or BEC incidents and 58% reported vishing or smishing. Gartner recommends phishing-resistant authentication, verification-by-default for risky requests, and IR playbooks updated for multimodal impersonation and compromised AI agents. The article cites the 2024 Hong Kong deepfake video-call scam that cost a multinational over $25 million and notes North Korean operatives use deepfakes to infiltrate companies as remote IT workers.
- 41% of CISOs reported deepfake audio-call incidents; 36% video-call incidents
- 79% reported phishing, spear-phishing, or BEC in past 12 months
- Gartner urges verification-by-default and phishing-resistant authentication
- Hong Kong 2024 deepfake video call fraud caused over $25 million loss
- North Korean operatives use deepfakes to pose as remote IT workers
- Organizations
- GartnerMalwarebytesJumioVector Institute
From the original article
2 min read at helpnetsecurity.com
AI is letting cybercriminals reach deeper into organizations than a phishing email ever could. 41% of CISOs reported at least one social engineering incident involving a deepfake during an employee audio call in the past 12 months, according to Gartner. 36% reported the same for a video call.
By Sinisa Markovic · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.