
Exabeam, a leader in intelligence and automation for security operations, released its multinational report, From Human to Hybrid: How AI and the Analytics Gap Are Fueling Insider Risk, on August 21, 2025. Based on a survey of 1,010 cybersecurity professionals, the report highlights that insider threats, amplified by AI, have overtaken external attacks as the primary security concern, with 64% of respondents identifying insiders as the greater risk.
64% of cybersecurity professionals view insiders as top risk.
76% report unauthorized generative AI (GenAI) use in organizations.
53% observed increased insider incidents; 54% expect continued growth.
Only 44% use User and Entity Behavior Analytics (UEBA) for detection.
AI-enhanced phishing and social engineering are top threat vectors (27%).
Full report available at exabeam.com/from-human-to-hybrid.
The report underscores a shift in the threat landscape, with insider activity—both malicious and accidental—intensifying. Over the past year, 53% of organizations reported a measurable increase in insider incidents, and 54% anticipate further growth. Government (73%), manufacturing (60%), and healthcare (53%) sectors expect the steepest rises, driven by expanded access to sensitive systems. Regionally, Asia-Pacific and Japan project the highest growth (69%), while the Middle East anticipates a 30% decrease, possibly underestimating evolving risks.
AI, particularly generative AI (GenAI), is making insider threats faster and stealthier. “Insiders aren’t just people anymore,” said Steve Wilson, Chief AI and Product Officer at Exabeam. “They’re AI agents logging in with valid credentials, spoofing trusted voices, and making moves at machine speed.” AI-enhanced phishing and social engineering, cited by 27% of respondents, are among the top threat vectors, adapting in real-time to evade detection. Unauthorized GenAI use, reported by 76% of organizations, is prevalent in technology (40%), financial services (32%), and government (38%) sectors, with the Middle East noting it as the top concern (31%).
Despite 88% of organizations having insider threat programs, only 44% utilize UEBA, the critical tool for detecting behavioral anomalies. Traditional tools like identity management, security training, DLP, and EDR lack the context to identify subtle risks. While 97% of organizations use AI in threat detection, governance lags, with many tools still in pilot stages. “AI has added a layer of speed and subtlety to insider activity that traditional defenses weren’t built to detect,” said Kevin Kirkwood, CISO at Exabeam. Privacy concerns, fragmented tools, and challenges in interpreting user intent further hinder detection.
To address AI-driven insider threats, Exabeam advocates for:
Behavioral Analytics: Implementing UEBA to establish user baselines and detect anomalies.
Governance for AI: Treating GenAI as privileged access with strict policies and logging.
Leadership Alignment: Bridging the gap where 74% of practitioners say executives underestimate risks.
Outcome Metrics: Measuring detection time, containment speed, and analytics-driven incident resolution.
The report emphasizes context-driven approaches, cross-functional collaboration, and governance models that match AI’s rapid evolution to reduce exposure windows and enhance resilience.
Exabeam is a leader in intelligence and automation that powers security operations for the world’s smartest companies. As a global cybersecurity innovator, Exabeam provides industry-proven, security-focused, and flexible solutions for faster, more accurate threat detection, investigation, and response (TDIR). Cutting-edge technology enhances security operations center performance, optimizing workflows and accelerating time to resolution. With consistent leadership in AI innovation and a proven track record in security information and event management (SIEM) and user behavior analytics, Exabeam empowers global security teams to combat cyberthreats, mitigate risk, and streamline operations.