Loading story…
Industrial and enterprise organizations are accelerating AI deployments, but security is increasingly the limiting factor as connectivity and automation expand the attack surface. Cisco’s 2026 State of Industrial AI Report (surveying 1,000+ decision-makers across 19 countries) reports cybersecurity as the top obstacle to industrial AI adoption, with 40% citing it as a leading barrier and 48% calling security/segmentation their biggest networking challenge—reflecting that legacy industrial networks were not designed for the scale, wireless reliability, and segmentation demands of AI-enabled operations.
In parallel, multiple executive-focused commentaries warn that AI both increases attacker capability and raises the bar for defensive readiness, but do not describe a single discrete incident. ZDNET highlights that “AI-driven ransomware” is increasingly backup-aware, potentially dwelling for weeks to map recovery systems and corrupting restore points—undermining assumptions that encrypted backups alone ensure recovery—while another ZDNET piece argues that claims AI will make cybersecurity “obsolete” are overstated, positioning AI’s more realistic benefit as reducing avoidable software flaws (e.g., via automated debugging) rather than eliminating complex, adversarial security problems. A separate ZDNET article provides generic AI security tactics (knowledge-sharing, partnering, automation) aimed at reducing risk during AI rollouts, reinforcing the broader theme that AI adoption must be paired with stronger security governance and resilience engineering.
Track how attackers are adapting to this technology.
4 events from the most recent confirmed update back to the earliest known activity.
At the RSAC 2026 Conference, Tenable co-CEO Stephen Vintz said enterprise AI adoption was outpacing governance, creating a 'responsibility gap' in which security teams are accountable for systems they did not design or control. He said roughly half of organizations using AI had already experienced an AI-related cyber incident and cited a major financial institution where a misconfigured internal AI assistant exposed sensitive documents to thousands of employees.
Cisco's 2026 State of Industrial AI Report found that among more than 1,000 decision-makers across 19 countries, cybersecurity had risen from the third-ranked external growth obstacle in 2024 to the leading barrier by 2026. The report also found 61% of organizations had deployed AI at scale, but segmentation, network readiness, and IT/OT silos were limiting broader rollout.
ZDNET described new AI-driven application security tools from Anthropic, OpenAI, and Google DeepMind that can monitor code changes, identify vulnerabilities, and in some cases propose or apply fixes with human review. The article concluded these tools may reduce avoidable software flaws but are unlikely to make broader cybersecurity functions obsolete.
ZDNET reported that AI-enabled ransomware is increasingly designed to dwell in victim networks long enough to identify and sabotage backup and recovery systems before encryption. The article also cited a Sicarii ransomware variant with a cryptographic flaw that deletes its RSA key after encrypting data, making decryption impossible even if a victim pays.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
4 references tracked. Mallory keeps watching after this page renders.
itpro.com
Open sourcehelpnetsecurity.com
Open sourcezdnet.com
Open sourcezdnet.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Multiple industry and practitioner reports describe **AI accelerating both cyber threats and enterprise security programs**, with a recurring theme that organizational readiness is not keeping pace with attacker speed. Ivanti’s *2026 State of Cybersecurity* findings highlight a “preparedness gap,” where 63% of respondents perceived increased threat activity but only 30% reported being well prepared; the widest gaps were reported for **zero-day exploits** and **long-running intrusion campaigns**, and respondents cited challenges moving from detection into response/containment as well as uneven AI deployment due to integration and trust concerns. Separate leadership and practitioner commentary frames AI as a strategic inflection point for technology and security leaders rather than a discrete incident. McKinsey’s *Global Tech Agenda 2026* positions the CIO role as shifting toward business strategy, emphasizing deploying AI “at scale and with velocity” while maintaining security and compliance. Arizona State University’s CISO described using AI to improve **data classification**, enabling more effective **DLP** and strengthening **IAM** to support governance of an internal AI platform hosting 60+ LLMs. Other items in the set are adjacent but not directly tied to AI threat preparedness, including research on the **carbon footprint of cybersecurity controls** (notably backups and IAM) and a “Clean Data Alliance” launch that reads as promotional/industry positioning rather than security intelligence.
Jun 29, 2026
Artificial intelligence is rapidly transforming both the threat landscape and defensive strategies in cybersecurity, prompting CISOs and security leaders to rethink their approaches. A global study by Gigamon found that 86% of CISOs now view metadata and packet-level data as essential for detecting threats in complex hybrid cloud environments, but 97% admit to making trade-offs that leave visibility gaps. The rise of AI-driven attacks is fueling demand for real-time visibility and observability tools, with 75% of CISOs regarding public cloud as their highest security risk and 73% considering moving workloads back to private clouds. Security teams are investing heavily in AI-specific security tools, with 73% of companies spending over $1 million annually, yet 70% cite the rapid pace of AI development as their top concern. Recent high-profile breaches, such as those at LexisNexis Risk Solutions and McLaren Health Care, illustrate the increasing scale and sophistication of attacks, often amplified by AI. AI is accelerating the reconnaissance phase of attacks, enabling adversaries to map environments and identify vulnerabilities with unprecedented speed and precision, though human direction remains necessary for effective exploitation. The proliferation of AI-generated code, including through practices like 'vibe coding,' introduces new risks as less experienced developers may overlook security fundamentals, leading to insecure applications. Agentic AI systems, which act autonomously or on behalf of users, present urgent challenges in authentication, authorization, and identity management, with experts calling for scalable frameworks and robust credentials to prevent security lapses. CISOs are urged to build security into the design phase of software development, leveraging platform-native controls and enforcing policies like Row Level Security to minimize risk. The integration of AI into security operations is seen as both an opportunity and a challenge, requiring adaptive access solutions, post-quantum cryptography, and continuous monitoring. As AI reshapes digital transformation, organizations must balance the benefits of rapid innovation with the imperative to secure their environments against increasingly sophisticated, AI-powered threats. The consensus among experts is that security must evolve in tandem with AI capabilities, emphasizing proactive risk management, cryptographic agility, and a culture of security awareness across all levels of the organization.
Jun 29, 2026
Enterprises’ rapid deployment of **AI and agentic AI** is increasingly creating measurable security and business risk, including direct exposure of sensitive personal data and downstream impacts on risk transfer. A widely cited example involved McDonald’s *McHire* applicant-screening platform (built by *Paradox.ai*), where researchers reported a trivial backend credential weakness (`123456` as both username and password) and no MFA, potentially exposing data tied to roughly **64 million** applicants; the incident is being used by insurers and risk teams as evidence that AI adoption is moving faster than security and governance, contributing to tighter cyber-insurance language, higher premiums, and **AI-related exclusions**. Separate reporting also highlighted that “plug-and-play” AI is unrealistic at enterprise scale, with organizations increasingly needing custom integration and operational ownership rather than relying on off-the-shelf tools. Threat reporting during the same period reinforced that AI is expanding both attacker capability and the attack surface: researchers described **Pakistan-linked APT36** using AI coding tools to generate high volumes of low-quality malware variants (including in less common languages) and to leverage legitimate cloud services for command-and-control, complicating detection. Additional research flagged **AI-themed browser extensions** (Chrome/Edge) that impersonate legitimate tools and can harvest LLM chat histories and browsing activity, underscoring the risk of “shadow AI” and unvetted add-ons. In parallel, routine threat-intelligence summaries continued to track major incidents (e.g., ransomware and data breaches) alongside AI-enabled tactics, indicating that AI risk is becoming intertwined with broader enterprise security exposure rather than remaining a standalone technology concern.
Jun 29, 2026