A recent Eurobarometer survey has highlighted the growing cybersecurity risks faced by employees across the European Union, with nearly three in four workers reporting that they have encountered cyber-attacks or digital threats in the workplace.
The survey, conducted through the Eurobarometer public-opinion research system widely used by European Union institutions, also identified phishing as one of the most reported forms of cyber threat targeting employees.
According to the findings, more than 39% of respondents said they had encountered phishing links or messages, often delivered through emails and other digital communication channels. Such attacks are typically designed to trick employees into revealing sensitive information, including passwords, login credentials, financial details or other data that could provide attackers with access to corporate networks.
The findings also point to the growing role of artificial intelligence in cyber scams. AI-generated attacks accounted for around 15% of the scams experienced in the workplace, according to the survey. The increasing use of AI allows cyber criminals to create more convincing messages, fake content and social-engineering campaigns, potentially making traditional warning signs harder for employees to identify.
One of the major concerns emerging from the survey is the level of cybersecurity awareness among employees. While many organizations invest in technical security measures, employee behavior remains an important part of an organization’s overall cybersecurity posture. Weak passwords, careless handling of information, clicking on suspicious links and sharing sensitive workplace details online can create opportunities for attackers.
The survey also suggested that some employees may underestimate the likelihood of their organization becoming a target. Smaller businesses and workplaces may assume that they are less attractive to cyber criminals because of their size or limited financial resources. However, cyber-attacks are not necessarily limited to large corporations. Attackers can target organizations of different sizes, particularly when employees provide an easier route into business systems.
There were, however, some encouraging findings regarding awareness of AI-generated content. Around 48% of employees said they could recognize AI-generated fake video content, indicating that a significant proportion of workers are becoming more familiar with the risks associated with deepfakes and other forms of synthetic media.
At the same time, another finding raises concern: around 69% of respondents said they were unaware that work-related information should not be shared on social media. Information posted publicly can potentially be used by cyber-criminals for social engineering, impersonation and targeted phishing campaigns.
The survey underlines the importance of cybersecurity awareness training, employee education and basic cyber hygiene in modern workplaces. As phishing techniques become more sophisticated and AI tools make digital scams increasingly convincing, organizations may need to focus not only on technical security systems but also on helping employees recognize and respond to emerging threats.
Join our LinkedIn group Information Security Community!
