Loading story…
Security leaders are increasingly focused on the practical applications of artificial intelligence (AI) within security operations, moving beyond vendor hype to address real-world challenges and opportunities. Ken Bowles, Director of Security Operations at GreenSky, highlights the importance of prioritizing protection of critical assets and leveraging AI to enhance alert investigation and context-building, rather than relying solely on dashboards. He emphasizes that while AI can streamline workflows and reduce alert fatigue, a pragmatic approach is necessary, with automation and AI serving as tools to support, not replace, fundamental security practices.
At the industry level, AI is driving strategic shifts, with security company indices reaching new highs and boards actively seeking AI specialists to guide long-term planning. The rapid adoption of AI presents both innovation opportunities and increased cyber risk, prompting CISOs and boards to adapt their strategies and communication. Clear leadership and a focus on aligning language with action are seen as essential for successfully navigating the evolving AI-driven security landscape.
Track how attackers are adapting to this technology.
7 events from the most recent confirmed update back to the earliest known activity.
Additional items note that security leaders are evaluating how to manage risk while adopting the Model Context Protocol for agentic AI systems. The discussion centers on balancing innovation with security controls.
The segment summarizes security leadership concerns about shadow AI, AI-enabled attacks, and weaknesses in AI pipelines. It presents these as immediate operational and risk-management issues for defenders.
The referenced leadership guidance says corporate boards are recruiting AI specialists to strengthen oversight and strategy around AI adoption. The development is presented as a governance response to AI's growing business and security impact.
Security Weekly notes that Netskope is expected to replace CyberArk in the 'Security Weekly 25' index once Palo Alto Networks' acquisition closes. This describes a pending index reconstitution tied to the completion of the deal.
The notes state that Netskope completed a new IPO, marking a significant corporate milestone in the cybersecurity market. This is presented as one of the notable market developments covered in the segment.
The segment reports that the NASDAQ hit a record high and that the 'Security Weekly 25' index returned to near all-time highs. This reflects improved market performance for tracked security companies.
Security Weekly segment notes say funding and M&A activity in the cybersecurity industry have moved toward AI-focused companies and themes. The item frames this as part of a broader market and strategy shift affecting security vendors and leadership priorities.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Security leaders across industries are increasingly concerned about the rapid evolution of AI-enabled cyberattacks, which are now among the top threats facing enterprises. Recent research highlights that cybercriminals are leveraging artificial intelligence to automate and enhance attack chains, including the use of deepfakes, automated phishing, and AI-generated malware. These AI-driven threats are capable of executing full attack sequences autonomously, from reconnaissance to data exfiltration, at speeds and scales previously unattainable by human operators. Security teams are responding by investing heavily in AI-powered defensive tools, aiming to accelerate detection, triage, and containment of threats. However, experts caution that AI should be used as a 'copilot' rather than an 'autopilot,' emphasizing the necessity of human oversight to ensure effective and responsible use of these technologies. The human element remains a critical vulnerability, as attackers use generative AI to craft highly convincing social engineering campaigns, including synthetic audio and video, which can bypass traditional awareness programs. The arms race between offensive and defensive AI is intensifying, with both sides seeking to outpace the other in sophistication and automation. Security leaders are also grappling with the challenge of integrating AI into their broader risk management and governance frameworks, ensuring that AI-driven solutions align with organizational policies and regulatory requirements. The expanding role of the CISO now includes oversight of AI risk, reflecting the technology's growing impact on enterprise security posture. As AI becomes more embedded in both attack and defense, organizations are re-evaluating their incident response strategies, workforce training, and investment priorities. The shift towards AI-driven security operations is not without challenges, including the risk of over-reliance on automation and the need for continuous adaptation to evolving threat tactics. Industry studies indicate that while AI can handle routine security tasks, complex and strategic decision-making still requires skilled human analysts. The ongoing development of AI in cybersecurity is reshaping the landscape, demanding new approaches to both technology deployment and leadership. Security teams are urged to balance innovation with caution, ensuring that AI augments rather than replaces critical human judgment. The future of enterprise security will likely be defined by the effectiveness of this human-AI partnership in countering increasingly sophisticated, AI-powered adversaries.
Jun 29, 2026
Security leaders in both the financial and enterprise sectors are prioritizing the secure adoption and management of artificial intelligence (AI) technologies, as well as addressing the associated risks and operational challenges. CISOs are focusing on building resilience, integrating AI into security operations, and ensuring that AI-driven tools are used safely and effectively within their organizations. Key concerns include the emergence of new attack surfaces due to AI, the need for robust governance and visibility over AI tool usage, and the importance of balancing productivity with intellectual property protection. In the financial sector, companies like Advisor360 are implementing automation to control the proliferation of unsanctioned AI tools, known as "shadow AI," to maintain compliance and security in a highly regulated environment. Security leaders are also preparing for future threats such as quantum computing and the increasing sophistication of AI-driven attacks, including automated social engineering campaigns. The emphasis is on proactive strategies—such as embedding security controls early in AI adoption, standardizing enterprise-grade AI solutions, and educating employees on safe AI usage—to prevent burnout and ensure long-term business continuity. These efforts reflect a broader industry trend toward leveraging AI for both defensive and operational improvements, while remaining vigilant about the unique risks AI introduces to cybersecurity and regulatory compliance.
Jun 29, 2026
Artificial intelligence is fundamentally reshaping the cybersecurity landscape, introducing both new opportunities and significant risks for organizations and professionals. The adoption of AI tools is accelerating the learning curve for cybersecurity practitioners, enabling faster skill acquisition, automated reconnaissance, and streamlined exploit generation, as highlighted by experts who advocate for integrating AI into bug hunting and security research workflows. However, this technological leap is also disrupting traditional career paths, with studies showing a marked decline in entry-level cybersecurity and IT jobs as AI automates routine tasks such as help desk support, manual testing, and security monitoring. Industry leaders emphasize the need for IT teams to adapt by acquiring new skillsets and focusing on strategic problem-solving, as the majority of job skills are expected to change dramatically by 2030 due to AI's influence. Concurrently, the rise of autonomous AI agents introduces a new class of security risks, as these systems possess the ability to make independent decisions, access sensitive data, and execute code across networks, often in ways that are opaque and difficult to audit. The lack of robust identity management and oversight for these agentic systems leaves organizations vulnerable to novel attack vectors, including black box attacks where the root cause of malicious or erroneous actions is nearly impossible to trace. Deepfake technology, powered by generative AI, is rapidly becoming a favored tool for social engineering attacks, with a significant increase in organizations reporting incidents involving AI-generated impersonations of executives and employees. This trend is eroding traditional trust mechanisms, such as voice and video verification, and forcing security teams to rethink their authentication strategies. Ethical concerns are also at the forefront, as CISOs and boards are urged to monitor for red flags such as loss of human agency, lack of technical robustness, and data privacy risks associated with AI deployments. Regulatory frameworks and responsible AI governance are becoming essential to ensure that AI systems are deployed safely and ethically, particularly in sectors like financial services where the stakes are high. The convergence of these factors is creating a dynamic environment where cybersecurity professionals must continuously adapt to the evolving threat landscape, leveraging AI for defense while remaining vigilant against its misuse. As organizations rush to deploy AI-driven solutions, the need for comprehensive security strategies, ongoing workforce development, and ethical oversight has never been more critical. The future of cybersecurity will be defined by the ability to harness AI's power responsibly while mitigating its inherent risks, ensuring both operational resilience and trust in digital systems.
Jun 29, 2026