AI-driven mobile threats & human error reshape global security

Verizon's latest Mobile Security Index (MSI) finds that the convergence of artificial intelligence-powered threats and ongoing human error is driving a substantial shift in mobile risk for organisations globally.

The MSI, now in its eighth year, draws upon input from over 760 security leaders worldwide and highlights a marked increase in mobile attacks across multiple sectors, including government, enterprise, manufacturing, and small- to medium-sized businesses (SMBs).

Rise in AI-driven threats

According to the report, 85% of organisations surveyed have experienced a rise in mobile-related attacks.

The study indicates that the rapid proliferation of generative AI (genAI) applications on workplace mobile devices is amplifying this trend, with 93% of organisations reporting employee use of genAI tools via mobile.

Security leaders are expressing concern over the impact of this adoption. The report found that 64% of organisations see data compromise from employees entering sensitive information into genAI platforms as their top mobile risk. In addition, the potential for AI to automate social engineering tactics is emerging as a significant threat vector.

"The findings in this year's Mobile Security Index mirror the challenges we see every day. The rise of AI-driven threats requires a more proactive and intelligent approach to security, which is why we are committed to helping our clients navigate this complex landscape," said Mark Trumble, Head of Cybersecurity GTM, Asia Pacific, Verizon.

One area of concern is the increasing sophistication and automation enabled by AI. The survey reports that 77% of respondents believe AI-assisted deepfake and SMS phishing, or smishing, attacks are likely to succeed.

Moreover, only 17% of organisations have implemented defences aimed specifically at AI-assisted attacks, while just 12% have established protections against deepfake voice phishing attempts.

Human error remains a key risk factor

Human error continues to play a central role in security incidents. The MSI notes that, in smishing simulations, up to 50% of employees clicked on malicious links in 80% of test cases. This trend is consistent with broader cyber security patterns, with the report highlighting that the human element remains present in 60% of confirmed breaches, according to the 2025 Data Breach Investigations Report.

"This year's Mobile Security Index is a clear wake up call. Mobile security is no longer a perimeter defense, but a battle fought in the palm of every employee's hand," said Chris Novak, VP of Global Cybersecurity Solution, Verizon Business. "The rapid adoption of genAI is a gamechanger, and businesses of all sizes must rethink security measures aimed at AI-assisted attacks and support employees in leveraging technology securely".

MSI data points to an interconnected risk landscape, with the intersection of advancing AI technology and persistent human error becoming what the report describes as the new epicentre of organisational risk.

Key report findings

The survey reveals several developments shaping the outlook for 2025. Approximately 63% of organisations suffering a cyber incident reported significant consequences, such as downtime, representing a 16% increase from the previous year.

SMBs report particular vulnerability. Over half (57%) believe they are at a disadvantage compared to larger enterprises when responding to cyber incidents due to limited resources. The MSI also finds that SMBs lag behind larger companies in providing AI risk training, with only 39% offering comprehensive education compared to 50% amongst larger firms.

A gap remains in organisational governance of AI usage. Despite widespread use, only half of those surveyed have defined and enforced policies for genAI, suggesting a disconnect between adoption rates and security management practices.

Call for comprehensive defences

The report advises that the growing impact of AI and the persistence of human error signal a need for robust, holistic security strategies targeting both technological and behavioural risks. Specifically, it emphasises the benefits of unified visibility and enforcing security at the network level to support long-term resilience.

The MSI outlines the need for organisations to enhance their security postures against AI-enabled deception while also equipping employees to navigate new digital threats safely. Despite increased awareness of advanced threat techniques, the deployment of targeted defences remains limited among respondents.

The 2025 Mobile Security Index provides data for organisational leaders to make informed decisions regarding the management of mobile security, spanning both policy and technology in consideration of the evolving AI landscape.