AI moves fast. Stay in the know.

The cybersecurity agencies of the United States, United Kingdom, Canada, Australia, and New Zealand issued a rare joint statement warning that artificial intelligence is fundamentally accelerating cyber risk, and that the timeline for action is months, not years. Signed by the heads of CISA, the NSA, the UK's NCSC, and counterparts across the alliance, the statement calls on business leaders to treat AI-driven cyber risk as a board-level concern, not a technical one.

Source: CISA

What to know:

• The Five Eyes agencies issued a joint statement on June 22, 2026 — one of the most coordinated high-level calls to action the alliance has published on AI and cyber risk.
• Frontier AI models are expected to exceed current industry expectations within months, fundamentally transforming both offensive and defensive cyber capabilities.
• AI is compressing the window between vulnerability discovery and active exploitation from weeks to days or hours, while lowering barriers for malicious actors.
• Boards and executives must ensure resilience controls will perform under pressure, not just exist on paper; cyber risk is a leadership responsibility, not a technical one.
• Organizations are urged to reduce attack surface, accelerate patching cycles, harden identity and access controls, and run pre-incident preparedness exercises.
• Organizations delaying action face compounding operational, financial, and reputational risk alongside growing technical exposure.

Why it matters:

For mid-sized businesses adopting GenAI, this statement reinforces a risk already present in everyday operations. As employees use AI tools across browsers, desktops, and coding environments, organizations may lack visibility into what data is entering those systems, whether usage aligns with internal policies, or how quickly their risk exposure is changing. Point-in-time controls are no longer sufficient; AI risk requires continuous monitoring, prompt-level visibility, and governance that keeps pace with rapidly evolving AI capabilities and threat vectors.

A recent Writer and Workplace Intelligence survey found that some employees are actively resisting workplace AI initiatives by avoiding training, ignoring internal guidelines, refusing approved tools, or using unauthorized alternatives. In more serious cases, employees reported entering company information into public AI tools or manipulating performance results to make AI systems appear ineffective. The findings show that poorly communicated AI rollouts and overly restrictive governance can encourage shadow AI, sensitive-data exposure, and inconsistent adoption rather than responsible AI use.

Source: ITPro

What to know:

• The survey covered 1,200 employees and 1,200 C-suite executives across the US, UK, and Europe.
• Twenty-nine percent of employees admitted to engaging in behavior that undermined their organization’s AI strategy. This increased to 44% among Gen Z employees.
• Reported actions included avoiding AI training, ignoring usage guidelines, refusing approved tools, entering company information into public platforms, and tampering with performance metrics.
• Thirty percent of employees who resisted AI adoption were concerned that AI would replace their jobs.
• Twenty-six percent believed AI reduced their value or creativity, while 20% said the technology added to their workload.
• Seventy-six percent of executives considered employee resistance a serious threat to their company’s future.
• Sixty-seven percent of executives believed their organization had already experienced a data leak or security breach because an employee used an unapproved AI tool.

Why it matters:

For mid-sized businesses, employee resistance can create risks beyond low AI adoption. When workers ignore internal guidelines, bypass approved platforms, or enter company information into public AI tools, policies may exist on paper without being followed during actual AI interactions.

Clear communication, practical training, and useful approved tools can reduce employee workarounds. However, organizations also need AI policy enforcement that applies governance rules where employees use GenAI. Policy-aligned controls can help prevent sensitive data from being shared, restrict unsafe interactions, and guide employees toward approved behavior without relying solely on blanket bans. This allows businesses to support productive AI adoption while reducing data-protection, security, and compliance risks.