Fraud, Not Ransomware, Now Haunts the C-Suite: CEOs Shift Focus as Cyber Threats Evolve

It used to be that ransomware was the cyber specter haunting boardrooms worldwide, but a new report shows the game has changed. According to the World Economic Forum’s freshly released Global Cybersecurity Outlook 2026, CEOs now see cyber-enabled fraud-not ransomware-as the most pressing digital threat to their organizations. What’s behind this dramatic shift in executive anxiety, and what does it mean for the future of cyber defense?

Fast Facts

• Cyber fraud has surpassed ransomware as the top CEO concern for 2026.
• 73% of CEOs have been personally affected by, or know someone affected by, cyber-enabled fraud in 2025.
• AI vulnerabilities and exploitation of software flaws are now the second and third biggest concerns for CEOs.
• Ransomware remains the top worry for CISOs, highlighting a divide in risk perception.
• 64% of organizations now assess AI tool security before deployment, up from 37% last year.

For years, ransomware was the bogeyman keeping executives awake at night-crippling hospitals, hijacking city services, and draining millions from corporate coffers. But the latest WEF analysis signals a power shift in the cybercrime underworld. CEOs surveyed for the 2026 report overwhelmingly pointed to cyber-enabled fraud as their greatest source of digital dread, with nearly three-quarters having been touched by it directly or through close colleagues in 2025.

The numbers are stark: 77% believe cyber fraud has surged in the past year, far outpacing other threats. Meanwhile, AI vulnerabilities are now second on the CEO worry list, with 87% reporting an uptick-reflecting growing unease over how generative AI tools could inadvertently leak sensitive data. Exploitation of software flaws rounds out the top three concerns, while ransomware, once the unchallenged king of cyber fears, has fallen out of the CEO top tier altogether.

But the CISO (Chief Information Security Officer) community tells a different story. For them, ransomware remains public enemy number one, followed closely by supply chain disruptions. This split in priorities suggests a new dynamic: CEOs are laser-focused on direct financial losses and emerging risks, while CISOs remain guardians of operational resilience and continuity.

The report also highlights a dramatic shift in how organizations approach AI. Last year, the primary fear was adversarial AI-hackers weaponizing artificial intelligence to supercharge their attacks. Now, the spotlight has moved to internal threats, particularly the accidental exposure of data by employees experimenting with generative AI tools. In response, more companies are scrutinizing AI security before adoption and deploying AI-based defenses for phishing, intrusion detection, and insider threats.

The WEF’s findings paint a picture of a threat landscape in flux, where yesterday’s nightmares are quickly eclipsed by new dangers. As cybercriminals pivot, so too must the strategies-and mindsets-of those tasked with defending the digital frontier.

Conclusion

The rapid rise of cyber fraud as the top CEO concern signals more than just changing criminal tactics-it’s a wake-up call for organizations to rethink their approach to digital security. In a world where the threat horizon is constantly shifting, vigilance, adaptability, and clear communication between business and security leaders are more critical than ever.

WIKICROOK

• Ransomware: Ransomware is malicious software that encrypts or locks data, demanding payment from victims to restore access to their files or systems.
• Cyber: Cyber refers to the digital world of computers, networks, and online systems, especially focusing on security, threats, and digital resilience.
• CISO (Chief Information Security Officer): A CISO is the executive in charge of a company’s information and data security strategy, overseeing cybersecurity policies and risk management.
• Generative AI: Generative AI is artificial intelligence that creates new content-like text, images, or audio-often mimicking human creativity and style.
• Adversarial AI: Adversarial AI is when attackers use artificial intelligence to automate, improve, or evade cyber attacks, challenging traditional security measures.