Loading story…
A new Forrester report forecasts that agentic AI will be responsible for a significant public cybersecurity breach in 2026, which is expected to result in employee dismissals. The report highlights the growing operational risks associated with agentic AI, where autonomous agents are empowered to make decisions and take actions, sometimes in coordination with other agents. According to Forrester senior analyst Paddy Harrington, the interconnected nature of agentic AI systems increases the risk of cascading failures, where a single fault can propagate and expose critical systems. Security leaders are urged to reconsider their approaches to deploying and governing agentic AI automation to prevent systemic failures. The report, titled 'Predictions 2026: Cybersecurity and Risk,' identifies five major shifts that CISOs should prepare for as threats become more autonomous, geopolitical, and fragmented. One of the key predictions is that five governments will nationalize or restrict telecom infrastructure, compelling organizations to reassess compliance and connectivity strategies. The report also anticipates that the European Union’s known exploited vulnerability database could surpass the U.S. equivalent in both speed and influence, potentially reshaping vulnerability management practices. Another significant trend is the expected sharp increase in quantum security spending as deadlines for post-quantum encryption approach, signaling a shift in cryptographic priorities. Additionally, Forrester predicts a high-profile merger between an aging IT vendor and a struggling cybersecurity firm will fail, causing disruption for enterprise customers who rely on their services. The report underscores the need for scalable identity security frameworks to support the secure deployment of AI agents. Harrington emphasizes that as agentic AI becomes more prevalent, the potential for systemic risk grows, making robust governance and oversight essential. The anticipated breach involving agentic AI is expected to be public and consequential, serving as a wake-up call for organizations to strengthen their AI risk management practices. The report’s findings suggest that the cybersecurity landscape in 2026 will be shaped by the interplay of advanced technologies, regulatory changes, and evolving threat actors. CISOs are advised to proactively address these emerging risks by updating policies, investing in new security technologies, and preparing for increased regulatory scrutiny. The Forrester report serves as a strategic guide for organizations aiming to navigate the complex and rapidly changing cybersecurity environment driven by agentic AI and related technological advancements.
Track how attackers are adapting to this technology.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Recent research and industry commentary highlight a significant escalation in cyber threats due to the operationalization of agentic, autonomous AI models by adversaries. According to a report by Anthropic, attackers are now leveraging AI agents to automate the entire attack lifecycle—including reconnaissance, vulnerability discovery, lateral movement, exploitation, and data exfiltration—at machine speed, bypassing traditional human-led defenses. These AI-driven campaigns are highly scalable and adaptive, using benign prompts to evade model guardrails and security profiling, which sets a new baseline for persistent operations against critical digital infrastructure. The convergence of hyperscale data centers, global cloud services, and AI-powered supply chains further expands the attack surface, making routine operations a potential cover for adversarial actions and challenging the effectiveness of conventional segmentation and perimeter defenses. Industry experts warn that both defenders and attackers are rapidly developing AI-powered capabilities, leading to a future where machine-versus-machine cyber warfare becomes the norm. Security leaders are urged to prepare for this shift by adopting AI-driven defense mechanisms capable of operating at machine speed, as traditional human-centric security operations will struggle to keep pace. The implications extend to the need for integrated, open security platforms and collaborative industry efforts to manage exposure and risk in this new era. The rise of agentic AI threats underscores the urgency for organizations to rethink their security strategies, invest in automation, and foster cross-functional collaboration to maintain resilience against increasingly sophisticated, autonomous adversaries.
Jun 29, 2026
Commentary from *Dark Reading* and the *Resilient Cyber* newsletter highlights **agentic AI** and broader **AI-enabled social engineering (including deepfakes)** as growing enterprise attack-surface concerns heading into 2026, alongside continued emphasis on fundamentals like vulnerability management. A *Dark Reading* readership poll framed agentic AI as the most likely major security trend for 2026, reflecting expectations that increasingly autonomous systems will become attractive targets and/or tools for cybercrime. A separate *Dark Reading* “Reporters’ Notebook” discussion urged security leaders to prioritize practical steps for 2026, including improving resilience against **phishing/social engineering**, accelerating **patching**, and preparing for **quantum-era cryptography** transitions. The *Resilient Cyber* newsletter echoed the “inflection point” theme for operationalizing AI security, citing model-provider discussions (e.g., OpenAI’s Cyber Preparedness Framework and Anthropic’s reporting on abuse) and arguing that defenders will need to adopt AI capabilities to keep pace with attackers, while acknowledging that guardrails can be bypassed and that AI-driven fraud (e.g., deepfake phishing) is already a near-term risk.
Jun 29, 2026
The rapid integration of agentic AI and automated tools into enterprise environments is outpacing the ability of security teams to adapt, according to recent industry reports. Attackers are leveraging both automation and early forms of agentic AI to bypass traditional defenses, forcing organizations to increase investments in AI-powered security solutions. Despite these efforts, many enterprises continue to experience significant losses, with measurable improvements in defense remaining inconsistent. Security leaders are urged to focus on the broader business impact of these threats and to accelerate the training and upskilling of their teams to effectively manage and tune AI-driven security tools. A parallel trend is the proliferation of non-human identities (NHIs) as organizations adopt AI agents within their identity infrastructure. This expansion is creating new security gaps, with a majority of IT leaders expecting agentic AI to be responsible for a substantial portion of cyberattacks in the near future. As a result, there is a marked shift in identity and access management strategies, with many organizations changing IAM providers due to security concerns. Confidence in the ability to recover quickly from incidents is declining, highlighting the urgent need for more robust and adaptive security measures in the face of evolving AI-driven threats.
Jun 29, 2026