New survey reveals 39% of employees have received no training against AI-powered cyber threats

Artificial intelligence is making employees more productive, helping businesses automate routine tasks and unlocking new ways of working. But the same technology is also changing the cyber threat landscape.

New research reveals that 39% of employees have received no training on AI-powered cyber threats in the last 12 months, despite growing concern about the sophistication and scale of modern attacks.

The findings suggest many organisations may be leaving employees exposed to a new generation of cyber risks, where phishing emails, social engineering scams and fraudulent communications are increasingly enhanced by AI.

Dedicated AI cyber training remains the exception, not the rule

While AI-driven threats are becoming more common, only 25% of employees say they have received training specifically focused on these risks.

For many organisations, AI-related threats are still covered as part of broader cyber awareness programmes rather than addressed directly. As attackers leverage AI to create increasingly convincing messages, employees may not be receiving the specific knowledge needed to recognise the warning signs.

This growing skills gap is becoming more apparent as AI-generated phishing attempts become harder to distinguish from legitimate communications.

Confidence remains low when spotting AI-generated phishing attacks

The survey found that more than one-third of employees lack confidence in their ability to identify an AI-generated phishing email.

When asked how confident they would be in recognising an AI-created phishing message, 35% admitted they were either not very confident or not at all confident.

This should concern employers. Despite advancements in security technologies, employees remain one of the most important lines of defence against cyber attacks. If staff are unsure what AI-enabled threats look like, organisations could face increased exposure to security breaches, data loss and financial fraud.

A growing disconnect between leaders and frontline employees

One of the most striking findings from the research is the difference in confidence between senior leaders and the wider workforce.

Almost half (48%) of owners and partners believe they would be very confident in identifying an AI-generated phishing email. Among non-management employees, however, that figure drops to just 9%.
The training gap is equally significant.

Six in ten (61%) non-management employees report receiving no training on AI-driven cyber threats, suggesting that those most likely to encounter suspicious emails and messages in their day-to-day roles may be receiving the least support.

AI governance is still maturing

The survey also highlights broader challenges around organisational AI readiness.
Over one in five employees (22%) say their organisation has no AI policy in place. A further proportion are unsure whether one exists at all, meaning almost half of employees either lack an AI policy or are unaware of one.

Even where policies are established, understanding appears limited. Just 31% of respondents say their organisation has an AI policy and that they know what it covers.
Without clear AI governance, organisations risk creating uncertainty around the safe and responsible use of AI technologies.

The need for stronger AI cyber awareness

The research paints a clear picture. AI is no longer an emerging technology. It is already reshaping both the way organisations work and the way cyber criminals operate. Yet training, awareness and governance are not always keeping pace.

With 39% of employees receiving no training on AI-powered cyber threats, and only a quarter receiving dedicated instruction on these risks, organisations have an opportunity to strengthen their human defences before the next generation of AI-enabled attacks becomes the norm.

As AI tools continue to evolve, building employee awareness may prove just as important as investing in new security technologies.

Get in touch with our experts to prepare your organisation against AI cyber security threats

A TLF survey of 1,000 workers conducted 24/09/2026