Tag: Staff

Security Stop-Press : Staff Increasingly Relaxed About Workplace Fraud

Posted on by Paul Stradling

New research from Cifas suggests some UK employees are becoming increasingly comfortable with workplace fraud and insider threats.

The survey found that 24 per cent believed it was acceptable to secretly work for a competitor, while 13 per cent admitted selling, or knowing someone who had sold, company login details.

Cifas warned the findings point to “shifting norms, blurred boundaries, and rising risks to organisational integrity”, with insider threats becoming a growing concern for employers.

For businesses, the report reinforces the need for stronger access controls, staff training, and better monitoring of insider risks, as cybercriminals increasingly target employees as a route into company systems and sensitive data.

Security Stop-Press: A Third Of Staff Hide AI Usage From Employers

Posted on by Paul Stradling

Nearly a third of office staff are secretly using AI tools at work, risking data breaches, compliance failures, and loss of intellectual property.

Ivanti’s latest Technology at Work report reveals that 42 per cent of employees now use AI daily, but many do so without approval. For example, 36 per cent believe it gives them a hidden edge, while others worry about job security or fear judgement from colleagues. Crucially, even 38 per cent of IT professionals admit to using unauthorised tools, despite knowing the risks.

This covert use of AI, dubbed ‘shadow AI’, is raising red flags across the industry. As Ivanti’s legal chief Brooke Johnson warns: “Employees adopting this technology without proper guidelines or approval could be fuelling threat actors”. Also, a separate study by Veritas found over a third of UK staff had fed sensitive data into chatbots, often unaware of the potential consequences.

Several major firms, including Apple, Samsung and JP Morgan, have already restricted workplace AI use following accidental leaks, but Ivanti warns that policy alone isn’t enough i.e., businesses must assume shadow AI is already happening and act accordingly.

To reduce the risk, companies should enforce clear AI policies, educate staff, and monitor real-world usage. Without visibility and oversight, AI could turn from productivity tool to security liability.