Loading story…
Organizations are increasingly turning to agentic artificial intelligence (AI) to address the growing complexity and volume of cybersecurity threats. Transurban, a global roadway operator, has implemented agentic AI models to automate the triaging and scoring of security alerts, significantly improving the efficiency and accuracy of their security operations center (SOC). This approach allows SOC analysts to focus on higher-priority incidents while AI handles the initial assessment of the majority of alerts, addressing the challenge of overwhelming alert volumes and reducing the risk of missed or mishandled incidents.
Industry discussions highlight that the adoption of AI-driven tools is not only a response to technical challenges but also to rising expectations from organizational leadership. CISOs are under increasing pressure from boards to deliver clear, business-friendly metrics and maintain readiness despite limited resources and frequent incidents. The integration of agentic AI into cyber defense strategies is seen as a critical innovation to bridge the gap between operational demands and leadership expectations, helping organizations manage both technical and organizational risks more effectively.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
5 events from the most recent confirmed update back to the earliest known activity.
Cybersecurity startup 7AI raised a record $130 million Series A round, underscoring investor interest in AI-driven security tools. The reference does not specify an earlier date for the funding event.
Zafran Security launched an agentic exposure management platform following a $60 million Series C round. The launch was cited as part of the industry's shift toward agentic AI and continuous threat and exposure management.
AWS introduced a Security Agent designed for automated, context-aware penetration testing, reflecting broader adoption of agentic AI in security operations. The reference does not provide a more specific event date than the publication timeframe.
After the September deployment, Transurban said the system reduced alert triage times by 60%, achieved 100% incident coverage, and kept false positives below 3%. The company also said it plans to expand the platform with external threat intelligence and eventually automated containment capabilities.
Transurban implemented an agentic AI system in September 2025 to help its security operations center automate alert triage and incident scoring. The deployment used Anthropic Claude integrated with Splunk SIEM, ServiceNow, and AWS Bedrock, with human analysts retaining final control over ticket closure.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Security operations centers (SOCs) are increasingly leveraging agentic AI to address the global shortage of cybersecurity professionals and the overwhelming volume of security alerts. By automating low-level decision-making and triage, agentic AI enables security teams to shift from reactive incident response to proactive threat hunting, allowing them to focus on strategic security initiatives rather than being bogged down by alert fatigue. Industry data highlights that organizations are inundated with hundreds of alerts daily, with a significant portion being ignored due to human limitations, underscoring the need for AI-driven solutions. AI agent tools are revolutionizing the workflow for SOC analysts by automating complex investigation tasks that previously required manual queries and cross-system checks. These agents utilize structured tool interfaces to translate natural language questions into actionable security investigations, dynamically adapting to new threats and integrating with various security platforms. This evolution in security automation empowers analysts to supervise AI-driven investigations, significantly improving detection, triage, and response capabilities at scale.
Jul 12, 2026
Recent research and industry commentary highlight a significant escalation in cyber threats due to the operationalization of agentic, autonomous AI models by adversaries. According to a report by Anthropic, attackers are now leveraging AI agents to automate the entire attack lifecycle—including reconnaissance, vulnerability discovery, lateral movement, exploitation, and data exfiltration—at machine speed, bypassing traditional human-led defenses. These AI-driven campaigns are highly scalable and adaptive, using benign prompts to evade model guardrails and security profiling, which sets a new baseline for persistent operations against critical digital infrastructure. The convergence of hyperscale data centers, global cloud services, and AI-powered supply chains further expands the attack surface, making routine operations a potential cover for adversarial actions and challenging the effectiveness of conventional segmentation and perimeter defenses. Industry experts warn that both defenders and attackers are rapidly developing AI-powered capabilities, leading to a future where machine-versus-machine cyber warfare becomes the norm. Security leaders are urged to prepare for this shift by adopting AI-driven defense mechanisms capable of operating at machine speed, as traditional human-centric security operations will struggle to keep pace. The implications extend to the need for integrated, open security platforms and collaborative industry efforts to manage exposure and risk in this new era. The rise of agentic AI threats underscores the urgency for organizations to rethink their security strategies, invest in automation, and foster cross-functional collaboration to maintain resilience against increasingly sophisticated, autonomous adversaries.
Jun 29, 2026
Advancements in artificial intelligence, particularly agentic AI, are rapidly transforming both legitimate and criminal cyber operations. AI agents now possess the autonomy to interact with external systems, collect information, and execute tasks with minimal human supervision, streamlining routine activities for both defenders and attackers. While these technologies can lower the barrier to entry for less skilled threat actors, they also introduce new challenges, as AI systems require careful instruction and oversight to avoid errors or unintended consequences. The emergence of the first AI-orchestrated cyber campaign marks a significant milestone, signaling increased experimentation and innovation in the use of AI for cybercrime, but also offering new opportunities for defensive teams to leverage these tools for improved security outcomes. A recent industry report highlights that 97% of cybersecurity professionals now view automation, increasingly powered by AI, as essential to business operations, reflecting a substantial increase in adoption over the past year. Despite this enthusiasm, 96% of organizations still encounter significant obstacles, including technology limitations, lack of trust in automated outcomes, and insufficient time for implementation. The report, based on a survey of 750 senior cybersecurity professionals across major sectors and regions, underscores both the growing reliance on AI-driven automation and the persistent challenges that must be addressed to fully realize its benefits in combating escalating cyber threats.
Jun 29, 2026