Loading story…
CIOs and technology leaders are responding to concerns about an AI market bubble by adopting more disciplined, risk-aware approaches to AI investments. Many are focusing on de-risking commitments, tightening governance, and favoring shorter contracts to maintain flexibility as the market evolves. Experts predict that the initial hype around AI will subside, with organizations shifting their attention to practical applications, governance, and measurable returns on investment. Companies are increasingly appointing heads of AI governance and emphasizing pilot projects that can demonstrate tangible business value before scaling up.
In parallel, some enterprises are implementing structured programs to democratize AI expertise across their workforce, aiming to drive adoption while balancing innovation with data security. By leveraging both partner-provided and proprietary AI tools, organizations like Black & Veatch are embedding AI into core business functions such as engineering, safety, and resource management. This cohort-driven approach is designed to overcome human barriers to adoption, foster internal champions, and convert employee engagement into operational and competitive advantages.
Track how attackers are adapting to this technology.
3 events from the most recent confirmed update back to the earliest known activity.
Industry predictions for 2026 said AI hype would cool as enterprises delay some spending, demand clearer ROI, and increase governance and CFO oversight. The outlook also highlighted rising cybersecurity risks from AI in OT environments and more sophisticated generative AI-enabled attacks.
Technology leaders reported taking a more cautious approach to AI investment, emphasizing de-risking, vendor scrutiny, software rationalization, and resilient architectures. They said this disciplined strategy would continue into 2026 as organizations focus on proven, high-value use cases and stronger data governance.
Black & Veatch rolled out a cohort-driven AI adoption strategy that combines hands-on training, champion networks, governance, and secure guardrails. The company also leveraged partner tools and its proprietary BV ASK platform to expand responsible AI use across employee owners.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
3 references tracked. Mallory keeps watching after this page renders.
cio.com
Open sourcetechrepublic.com
Open sourcecio.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Chief Information Officers (CIOs) are increasingly focused on developing and executing AI strategies that deliver measurable business value, as recent research highlights widespread challenges in achieving returns on AI investments. Multiple reports, including those from MIT and Gartner, indicate that the majority of AI projects fail to scale, solve business problems, or generate expected returns, with some studies noting that up to 95% of organizations see no ROI from significant generative AI investments. However, organizations with mature AI practices report sustained benefits in efficiency, productivity, and market differentiation, emphasizing the importance of aligning AI initiatives with clear business outcomes, robust data operations, and organizational risk appetite. Experts and successful CIOs agree that there is no universal formula for AI strategy success. Instead, they recommend a tailored approach that includes focusing on outcome-driven objectives, ensuring AI projects are directly tied to business goals, and continuously measuring value through key performance indicators. Additional best practices include fostering internal AI competencies, transforming data governance, and maintaining alignment between IT and business units. These insights underscore the need for CIOs to critically assess their AI strategies, prioritize high-value use cases, and adapt governance models to maximize the impact of AI across the enterprise.
Jun 29, 2026
Security leaders across industries are increasingly concerned about the rapid evolution of AI-enabled cyberattacks, which are now among the top threats facing enterprises. Recent research highlights that cybercriminals are leveraging artificial intelligence to automate and enhance attack chains, including the use of deepfakes, automated phishing, and AI-generated malware. These AI-driven threats are capable of executing full attack sequences autonomously, from reconnaissance to data exfiltration, at speeds and scales previously unattainable by human operators. Security teams are responding by investing heavily in AI-powered defensive tools, aiming to accelerate detection, triage, and containment of threats. However, experts caution that AI should be used as a 'copilot' rather than an 'autopilot,' emphasizing the necessity of human oversight to ensure effective and responsible use of these technologies. The human element remains a critical vulnerability, as attackers use generative AI to craft highly convincing social engineering campaigns, including synthetic audio and video, which can bypass traditional awareness programs. The arms race between offensive and defensive AI is intensifying, with both sides seeking to outpace the other in sophistication and automation. Security leaders are also grappling with the challenge of integrating AI into their broader risk management and governance frameworks, ensuring that AI-driven solutions align with organizational policies and regulatory requirements. The expanding role of the CISO now includes oversight of AI risk, reflecting the technology's growing impact on enterprise security posture. As AI becomes more embedded in both attack and defense, organizations are re-evaluating their incident response strategies, workforce training, and investment priorities. The shift towards AI-driven security operations is not without challenges, including the risk of over-reliance on automation and the need for continuous adaptation to evolving threat tactics. Industry studies indicate that while AI can handle routine security tasks, complex and strategic decision-making still requires skilled human analysts. The ongoing development of AI in cybersecurity is reshaping the landscape, demanding new approaches to both technology deployment and leadership. Security teams are urged to balance innovation with caution, ensuring that AI augments rather than replaces critical human judgment. The future of enterprise security will likely be defined by the effectiveness of this human-AI partnership in countering increasingly sophisticated, AI-powered adversaries.
Jun 29, 2026
Enterprises are facing significant challenges in realizing the promised value of generative AI (GenAI) technologies, with only a small fraction of pilot projects achieving measurable success. The rapid adoption of large language models (LLMs), retrieval-augmented generation (RAG) pipelines, and multi-agent systems has outpaced many organizations' ability to implement robust security, governance, and integration frameworks. Security concerns extend beyond traditional perimeter defenses, as GenAI systems are vulnerable to prompt injection attacks, agentic manipulations, and the creation of shadow models through reverse engineering. Experts emphasize that effective GenAI security requires granular control over what models can access and perform, with solutions such as secure enclaves for inference, dynamic PII scrubbing, and role-based data filtering gaining traction. Data quality, observability, and evaluation are also cited as critical factors for successful GenAI deployment. Despite the enthusiasm for AI-driven transformation, most enterprises lack comprehensive AI governance policies, with surveys indicating that only about a third of corporate boards have adopted formal frameworks for AI oversight. The absence of up-to-date governance and usage guidelines exposes organizations to operational and compliance risks, especially as the technology landscape evolves rapidly. CIOs are under pressure to establish or update AI governance models, often forming dedicated task forces to develop policies that include project evaluation, prioritization, and ongoing monitoring of AI initiatives. The foundation for successful AI adoption also depends on robust data governance, the establishment of a single source of truth (SSOT), and secure data management practices. Without these foundational elements, organizations struggle to scale AI pilots into enterprise-wide solutions. Industry reports reveal that only a small percentage of companies have achieved visible value from AI across their operations, with many failing to realize expected returns on investment. The gap between AI's potential and its realized value is widening, prompting calls for stronger oversight, better integration strategies, and a focus on delivering tangible business outcomes. As organizations race to implement AI, the need for comprehensive security, governance, and integration measures has become non-negotiable. The lessons learned from early GenAI pilots underscore the importance of aligning technical innovation with risk management and organizational readiness. Enterprises that address these challenges proactively are more likely to turn AI experimentation into sustainable business impact.
Jun 29, 2026