Human-centric cyber threats have long posed a serious issue for organizations. After all, humans are often the weakest link in the cybersecurity chain. Unfortunately, when artificial intelligence came into the mix, it only made these threats even more dangerous.

So, what can be done about these cyber threats now?

That’s precisely what we asked Tom Vazdar, the chair of the Enterprise Cybersecurity Master’s program at the Open Institute of Technology (OPIT), and Venicia Solomons, aka the “Cyber Queen.”

They dedicated a significant portion of their “Cyber Threat Landscape 2024: Navigating New Risks” master class to AI-powered human-centric cyber threats. So, let’s see what these two experts have to say on the topic.

Human-Centric Cyber Threats 101

Before exploring how AI impacted human-centric cyber threats, let’s go back to the basics. What are human-centric cyber threats?

As you might conclude from the name, human-centric cyber threats are cybersecurity risks that exploit human behavior or vulnerabilities (e.g., fear). Even if you haven’t heard of the term “human-centric cyber threats,” you’ve probably heard of (or even experienced) the threats themselves.

The most common of these threats are phishing attacks, which rely on deceptive emails to trick users into revealing confidential information (or clicking on malicious links). The result? Stolen credentials, ransomware infections, and general IT chaos.

How Has AI Impacted Human-Centric Cyber Threats?

AI has infiltrated virtually every cybersecurity sector. Social engineering is no different.

As mentioned, AI has made human-centric cyber threats substantially more dangerous. How? By making them difficult to spot.

In Venicia’s words, AI has allowed “a more personalized and convincing social engineering attack.”

In terms of email phishing, malicious actors use AI to write “beautifully crafted emails,” as Tom puts it. These emails contain no grammatical errors and can mimic the sender’s writing style, making them appear more legitimate and harder to identify as fraudulent.

These highly targeted AI-powered phishing emails are no longer considered “regular” phishing attacks but spear phishing emails, which are significantly more likely to fool their targets.

Unfortunately, it doesn’t stop there.

As AI technology advances, its capabilities go far beyond crafting a simple email. Venicia warns that AI-powered voice technology can even create convincing voice messages or phone calls that sound exactly like a trusted individual, such as a colleague, supervisor, or even the CEO of the company. Obey the instructions from these phone calls, and you’ll likely put your organization in harm’s way.

How to Counter AI-Powered Human-Centric Cyber Threats

Given how advanced human-centric cyber threats have gotten, one logical question arises – how can organizations counter them? Luckily, there are several ways to do this. Some rely on technology to detect and mitigate threats. However, most of them strive to correct what caused the issue in the first place – human behavior.

Enhancing Email Security Measures

The first step in countering the most common human-centric cyber threats is a given for everyone, from individuals to organizations. You must enhance your email security measures.

Tom provides a brief overview of how you can do this.

No. 1 – you need a reliable filtering solution. For Gmail users, there’s already one such solution in place.

No. 2 – organizations should take full advantage of phishing filters. Before, only spam filters existed, so this is a major upgrade in email security.

And No. 3 – you should consider implementing DMARC (Domain-based Message Authentication, Reporting, and Conformance) to prevent email spoofing and phishing attacks.

Keeping Up With System Updates

Another “technical” move you can make to counter AI-powered human-centric cyber threats is to ensure all your systems are regularly updated. Fail to keep up with software updates and patches, and you’re looking at a strong possibility of facing zero-day attacks. Zero-day attacks are particularly dangerous because they exploit vulnerabilities that are unknown to the software vendor, making them difficult to defend against.

Top of Form

Nurturing a Culture of Skepticism

The key component of the human-centric cyber threats is, in fact, humans. That’s why they should also be the key component in countering these threats.

At an organizational level, numerous steps are needed to minimize the risks of employees falling for these threats. But it all starts with what Tom refers to as a “culture of skepticism.”

Employees should constantly be suspicious of any unsolicited emails, messages, or requests for sensitive information.

They should always ask themselves – who is sending this, and why are they doing so?

This is especially important if the correspondence comes from a seemingly trusted source. As Tom puts it, “Don’t click immediately on a link that somebody sent you because you are familiar with the name.” He labels this as the “Rule No. 1” of cybersecurity awareness.

Growing the Cybersecurity Culture

The ultra-specific culture of skepticism will help create a more security-conscious workforce. But it’s far from enough to make a fundamental change in how employees perceive (and respond to) threats. For that, you need a strong cybersecurity culture.

Tom links this culture to the corporate culture. The organization’s mission, vision, statement of purpose, and values that shape the corporate culture should also be applicable to cybersecurity. Of course, this isn’t something companies can do overnight. They must grow and nurture this culture if they are to see any meaningful results.

According to Tom, it will probably take at least 18 months before these results start to show.

During this time, organizations must work on strengthening the relationships between every department, focusing on the human resources and security sectors. These two sectors should be the ones to primarily grow the cybersecurity culture within the company, as they’re well versed in the two pillars of this culture – human behavior and cybersecurity.

However, this strong interdepartmental relationship is important for another reason.

As Tom puts it, “[As humans], we cannot do anything by ourselves. But as a collective, with the help within the organization, we can.”

Staying Educated

The world of AI and cybersecurity have one thing in common – they never sleep. The only way to keep up with these ever-evolving worlds is to stay educated.

The best practice would be to gain a solid base by completing a comprehensive program, such as OPIT’s Enterprise Cybersecurity Master’s program. Then, it’s all about continuously learning about new developments, trends, and threats in AI and cybersecurity.

Conducting Regular Training

For most people, it’s not enough to just explain how human-centric cyber threats work. They must see them in action. Especially since many people believe that phishing attacks won’t happen to them or, if they do, they simply won’t fall for them. Unfortunately, neither of these are true.

Approximately 3.4 billion phishing emails are sent each day, and millions of them successfully bypass all email authentication methods. With such high figures, developing critical thinking among the employees is the No. 1 priority. After all, humans are the first line of defense against cyber threats.

But humans must be properly trained to counter these cyber threats. This training includes the organization’s security department sending fake phishing emails to employees to test their vigilance. Venicia calls employees who fall for these emails “clickers” and adds that no one wants to be a clicker. So, they do everything in their power to avoid falling for similar attacks in the future.

However, the key to successful employee training in this area also involves avoiding sending similar fake emails. If the company keeps trying to trick the employees in the same way, they’ll likely become desensitized and less likely to take real threats seriously.

So, Tom proposes including gamification in the training. This way, the training can be more engaging and interactive, encouraging employees to actively participate and learn. Interestingly, AI can be a powerful ally here, helping create realistic scenarios and personalized learning experiences based on employee responses.

Following in the Competitors’ Footsteps

When it comes to cybersecurity, it’s crucial to be proactive rather than reactive. Even if an organization hasn’t had issues with cyberattacks, it doesn’t mean it will stay this way. So, the best course of action is to monitor what competitors are doing in this field.

However, organizations shouldn’t stop with their competitors. They should also study other real-world social engineering incidents that might give them valuable insights into the tactics used by the malicious actors.

Tom advises visiting the many open-source databases reporting on these incidents and using the data to build an internal educational program. This gives organizations a chance to learn from other people’s mistakes and potentially prevent those mistakes from happening within their ecosystem.

Stay Vigilant

It’s perfectly natural for humans to feel curiosity when it comes to new information, anxiety regarding urgent-looking emails, and trust when seeing a familiar name pop up on the screen. But in the world of cybersecurity, these basic human emotions can cause a lot of trouble. That is, at least, when humans act on them.

So, organizations must work on correcting human behaviors, not suppressing basic human emotions. By doing so, they can help employees develop a more critical mindset when interacting with digital communications. The result? A cyber-aware workforce that’s well-equipped to recognize and respond to phishing attacks and other cyber threats appropriately.

Related posts

How Regenerative Business Models Are Redefining Innovation and Sustainability
OPIT - Open Institute of Technology
OPIT - Open Institute of Technology
Aug 18, 2025 6 min read

Open Institute of Technology (OPIT) masterclasses bring students face-to-face with real-world business challenges. In OPIT’s July masterclass, OPIT Professor Francesco Derchi and Ph.D. candidate Robert Mario de Stefano explained the principles of regenerative businesses and how regeneration goes hand in hand with growth.

Regenerative Business Models

Professor Derchi began by explaining what exactly is meant by regenerative business models, clearly differentiating them from sustainable or circular models.

Many companies pursue sustainable business models in which they offset their negative impact by investing elsewhere. For example, businesses that are big carbon consumers will support nature regeneration projects. Circular business models are similar but are more focused on their own product chain, aiming to minimize waste by keeping products in use as long as possible through recycling. Both models essentially aim to have a “net-zero” negative impact on the environment.

Regenerative models are different because they actively aim to have a “net-positive” impact on the environment, not just offsetting their own use but actively regenerating the planet.

Massive Transformative Purpose

While regenerative business models are often associated with philanthropic endeavors, Professor Derchi explained that they do not have to be, and that investment in regeneration can be a driver of growth.

He discussed the importance of corporate purpose in the modern business space. Having a strong and clearly stated corporate purpose is considered essential to drive business decision-making, encourage employee buy-in, and promote customer loyalty.

But today, simple corporate missions, such as “make good shoes,” don’t go far enough. People are looking for a Massive Transformational Purpose (MTP) that can take the business to the next level.

Take, for example, Ben & Jerry’s. The business’s initial corporate purpose may have been to make great ice cream and serve it up in a way that people will enjoy. But the business really began to grow when they embraced an MTP. As they announced in their mission statement, “We believe that ice cream can change the world.” Their business activities also have the aim of advancing human rights and dignity, supporting social and economic justice, and protecting and restoring the Earth’s natural systems. While these aims are philanthropic, they have also helped the business grow.

RePlanet

Professor Derchi next talked about RePlanet, a business he recently worked to develop their MTP. Founded in 2015, RePlanet designs and implements customized renewable energy solutions for businesses and projects. The company already operates in the renewable energy field and ranked as the 21st fastest-growing business in Italy in 2023. So while they were already enjoying great success, Derchi worked with them to see if actively embracing a regenerative business model could unlock additional growth.

Working together, RePlanet moved towards an MTP of building a greener future based on today’s choices, ensuring a cleaner world for generations. Meeting this goal started with the energy products that RePlanet sells, such as energy systems that recover heat from dairy farms. But as the business’s MTP, it goes beyond that. RePlanet doesn’t just engage suppliers; it chooses partners that share its specific values. It also influences the projects they choose to work on – they prioritize high-impact social projects, such as recently installing photovoltaic energy systems at a local hospital in Nigeria – and how RePlanet treats its talent, acknowledging that people are the true energy of the company.

Regenerative Business Strategies

Based on work with RePlanet and other businesses, Derchi has identified six archetypal regenerative business strategies for businesses that want to have both a regenerative impact and drive growth:

  • Regenerative Leadership – Laying the foundation for regeneration in a broader sense throughout the company
  • Nature Regeneration – Strategies to improve the health of the natural world
  • Social Regeneration – Regenerating human ecosystems through things such as fair-trade practices
  • Responsible Sourcing – Empowering and strengthening suppliers and their communities
  • Health & Well-being – Creating products and services that have a positive effect on customers
  • Employee Focus – Improve work conditions, lives, and well-being of employees.

Case Studies

Building on the concept of regenerative business models, Roberto Mario de Stefano shared other case studies of businesses that are having a positive impact and enjoying growth thanks to regenerative business models and strategies.

Biorfarm

Biorfarm is a digital platform that supports small-scale agriculture by creating a direct link between small farmers and consumers. Cutting out the middleman in modern supply chains means that farmers earn about 50% more for their produce. They set consumers up as “digital farmers” who actively support and learn about farming activities to promote more conscious food consumption.

Their vision is to create a food economy in which those who produce food and those who consume it are connected. This moves consumers from passive cash cows for large corporations that prioritize profits over the well-being of farmers to actively supporting natural production and a more sustainable system.

Rifo Lab

Rifo Lab is a circular clothing brand with the vision of addressing the problem of overproduction in the clothing industry. Established in Prato, Italy, a traditional textile-producing area, the company produces clothes made from textile waste and biodegradable materials. There are no physical stores, and all orders must be placed online; everything is made to order, reducing excess production.

With an eye on social regeneration, all production takes place within 30 kilometers of their offices, allowing the business to support ethical and local production. They also work with companies that actively integrate migrants into the local community, sharing their local artisan crafts with future generations.

Ogyre

Ogyre is a digital platform that allows you to pay fishermen to fish for waste. When fishermen are out conducting their livelihood, they also collect a significant amount of waste from the ocean, especially plastic waste. Ogyre arranges for fishermen to get paid for collecting that waste, which in turn supports the local fishing communities, and then transforms the waste collected into new sustainable products.

Moving Towards a Regenerative Future

The masterclass concluded with a Q&A session, where it explained that working in regenerative businesses requires the same skills as any other business. But it also requires you to embrace a mindset where value comes from giving and that growth is about working together for a better future, and not just competition.

Read the article
Addressing the Skills Gap: OPIT Prepares Students for the Modern Job Market
OPIT - Open Institute of Technology
OPIT - Open Institute of Technology
Aug 18, 2025 5 min read

Riccardo Ocleppo’s vision for the Open Institute of Technology (OPIT) started when he realized that his own university-level training had not properly prepared him for the modern workplace. Technological innovation is moving quickly and changing the nature of work, while university curricula evolve slowly, in part due to systems in place designed to preserve the quality of courses.

Ocleppo was determined to create a higher learning institution that filled the gap between the two realities – delivering high-quality education while preparing professionals to work in dynamic environments that keep pace with technology. Thus, OPIT opened enrolments in 2023 with a curriculum that created a unique bridge between the present and the future.

This is the story of one student, Ania Jaca, whose time at OPIT gave her the skills to connect her knowledge of product design to full system deployment.

Meet Ania

Ania is an example of an active professional who was able to identify what was missing in her own skills that would be needed if she wanted to advance her career in the direction she desired.

Ania is a highly skilled professional who was working on product and industrial design at Deloitte. She has an MA in product design, speaks five languages, studied in China, and is an avid boxer. She had the intelligence and the temperament to succeed in her career, but felt that she lacked the skills to advance and move from determining how products look to how systems really work, scale, and evolve.

Ania taught herself skills such as Python, artificial intelligence (AI), and cloud infrastructure, but soon realized that she needed a more structured education to go deeper. Thus, the search for her next steps began, and her introduction to OPIT.

OPIT appealed to Ania because it offered a fully EU-accredited MSc that she could pursue at her own pace, thanks to remote delivery and flexible hours. But more than that, it filled exactly the knowledge gap she was looking to build upon, teaching her technical foundations, but always with a focus on applications in the real world. Part of the appeal was the faculty, which includes professionals who are leaders in their field and who deal with current professional challenges on a daily basis, which they can bring into the classroom.

Ania enrolled in OPIT’s MSc in Applied Data Science & AI.

MSc in Applied Data Science and AI

This is OPIT’s first master’s program, which also launched in 2023, and is now one of four on offer. The course is designed for graduates like Ania who want a career at the intersection of management and technology. It is attractive to professionals who are already working in this area but lack the technical training to step into certain roles. OPIT requires no computer science prerequisites, so it accepted Ania with her MA in product design.

It is an intensive program that starts with foundational application courses in business, data science, machine learning, artificial intelligence, and problem-solving. The program then moves towards applying data science and AI methodologies and tools to real-life business problems.

The course combines theoretical study with a capstone project that lets students apply what they learn in the real world, either at their existing company or through internship programs. Many of the projects developed by students go on to become fundamental to the businesses they work with.

Ania’s Path Forward

Ania is working on her capstone project with Neperia Group, an Italian-based IT systems development company that works mostly with financial, insurance, and industrial companies. They specialize in developing analysis tools for existing software to enhance insight, streamline management, minimize the impact of corrective and evolutionary interventions, and boost performance.

Ania is specifically working on tools for assessing vulnerabilities in codebases as an advanced cybersecurity tool.

Ania credits her studies at OPIT for helping her build solid foundations in data science, machine learning, and cloud workflows, giving her a thorough understanding of digital products from end to end. She feels this has prepared her for roles at the intersection between infrastructure, security, and deployment, which is exactly where she wants to be. OPIT is excited to see where Ania’s career takes her in the coming years.

Preparing for the Future of Work

Overall, studying at OPIT has helped Ania and others like her prepare for the future of work. According to the Visual Capitalist, the fastest-growing jobs between 2025 and 2030 will be in big data (up by 110%), Fintech engineers (up by 95%), AI and machine learning specialists (up by 85%), software application developers (up by 60%), and security management specialists (up by 55%).

However, while these industries are growing, entry-level opportunities are declining in areas such as software development and IT. This is because AI now performs many of the tasks associated with those roles. Instead, companies are looking for experienced professionals to take on roles that involve more strategic oversight and innovative problem-solving. But how do recent graduates leapfrog past experienced professionals when there is a lack of entry-level positions to make the transition?

This is another challenge that OPIT addresses in its course design. Students don’t just learn the theory, OPIT actively encourages them to focus on applications, allowing them to build experience while studying. The capstone project consolidates this, enabling students to demonstrate to future employers their expertise at deploying technology to solve problems.

OPIT also has a dynamic Career Services department that specifically works with students to prepare them for the types of roles they want. This focus on not only learning but building a career is one of the elements that makes OPIT stand out in preparing graduates for the workplace.

Read the article