Loading story…
Gartner has identified artificial intelligence as a dominant force shaping strategic technology trends for 2026, highlighting its integration across various domains such as AI-native development platforms, AI supercomputing, and the transformation of business operations through automation and intelligent workflows. The report emphasizes that AI is no longer optional for organizations seeking to remain competitive, with predictions that AI-native platforms will enable smaller, more agile development teams and that AI-driven systems will orchestrate complex workloads in areas like machine learning and analytics.
In the context of cybersecurity, Gartner's analysis of AI-powered Security Operations Centers (SOCs) underscores the growing mainstream acceptance of AI's role in augmenting security analysts and automating key SOC functions. However, industry experts caution that treating "AI SOC" as a single, undifferentiated category overlooks the nuanced differences between AI applications in detection, triage, and response. Effective adoption requires organizations to assess which security activities would benefit most from AI augmentation and to select solutions tailored to specific operational needs, rather than adopting a one-size-fits-all approach.
Track how attackers are adapting to this technology.
2 events from the most recent confirmed update back to the earliest known activity.
Gartner published its 2026 tech trends, which ZDNet reported included topics beyond AI.
Intezer published a blog post discussing how to properly frame the conversation around AI in security operations centers.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The cybersecurity landscape in 2025 saw a significant evolution in both the use and abuse of artificial intelligence. Threat actors increasingly leveraged AI-powered tools, such as uncensored darknet assistants like DIG AI, to automate and scale malicious activities, including cybercrime, extremism, and privacy violations. Security researchers observed a surge in the adoption of "dark LLMs" and jailbroken AI chatbots, which lowered the barrier for cybercriminals and enabled more sophisticated attacks. At the same time, defenders began integrating generative AI and agentic systems into security operations centers (SOCs), with AI agents handling alert triage and detection tasks, but also introducing new risks related to trust, explainability, and operational complexity. Security leaders and experts highlighted the need for transparency, traceability, and risk-based prioritization in AI-powered SOC platforms, as well as the importance of addressing alert fatigue and ensuring that AI outputs are auditable. Looking ahead to 2026, the security of AI models and the potential for agentic AI to introduce insider risks are expected to become key challenges. The rapid adoption of AI in both offensive and defensive cyber operations underscores the urgency for organizations to adapt their security strategies, focusing on the unique risks and opportunities presented by AI technologies.
Jun 29, 2026
Google has forecasted that artificial intelligence will become a central force in both cyber defense and offense by 2026, fundamentally changing the cybersecurity landscape. According to Google's "Cybersecurity Forecast 2026" report, AI tools are expected to become standard for both attackers and defenders, enabling more sophisticated, rapid, and stealthy cyber operations. The report highlights that threat actors will use AI to escalate the speed and effectiveness of attacks, including social engineering campaigns, while defenders will leverage AI agents to enhance security operations and analyst capabilities. This shift is anticipated to usher in a new era of AI-driven cyber threats and defenses, with organizations needing to adapt quickly to the evolving threat environment. Industry commentary further supports the growing dominance of AI in cybersecurity discussions, emphasizing the need for robust governance, risk management, and new security strategies tailored to AI technologies. Security experts advise treating agentic AI tools as privileged digital insiders and implementing multi-phase security strategies to manage their unique risks. The broader cybersecurity community is also focusing on the implications of AI for market dynamics, workforce security, and the increasing sophistication of attacks such as executive impersonation and targeted phishing, underscoring the urgency for organizations to prepare for the AI-driven future of cyber threats and defenses.
Jul 12, 2026
Security leaders and practitioners are increasingly adopting AI and automation to enhance Security Operations Center (SOC) workflows, with a focus on practical frameworks and real-world implementation. Experts from Cisco Meraki and Binalyze have shared methodologies for integrating AI agents into detection, triage, and containment processes, emphasizing the importance of foundational processes, human oversight, and organizational buy-in. The use of AI in SOCs is highlighted as a means to accelerate incident response, improve detection and response metrics, and enable proactive threat hunting through the integration of digital forensics. Both sources stress that while AI will not replace security professionals, those who effectively leverage AI will gain a significant advantage in operational efficiency and security outcomes.
Jun 29, 2026