As a result of the digital transformation of human resource management, the widespread adoption of remote work, and the implementation of advanced artificial intelligence systems, human resource departments have become a critical point of organizational vulnerability and a target for cyberattacks. This article presents a typological analysis of threats targeting human resource functions, including phishing, recruitment fraud using deepfake technology, insider threats, and disinformation activities. It also outlines the legal and ethical framework, with particular emphasis on the General Data Protection Regulation and AI Act, which impose obligations on entities to ensure security, transparency, and human oversight over automated systems. The study aimed to identify and systematise the threats occurring in the field of human resources management in connection with the use of new technologies and artificial intelligence. Based on the conducted analysis, recommendations for organizational action have been formulated.