Loading story…
Organizations are rapidly embedding AI applications, agents, and code into enterprise resource planning (ERP) environments even as senior cybersecurity leaders report limited trust in AI to safeguard business-critical data. An Onapsis survey found that 22% of organizations experienced an AI-enabled security incident involving exploitation of critical business platforms in the previous 12 months.
Respondents also expressed limited confidence that existing defenses can identify AI-driven attacks against ERP systems. Leaders cited stronger access controls, improved protection of personal data, and sandbox or digital-twin testing environments as key safeguards for deploying AI in ERP environments.
Track how attackers are adapting to this technology.
1 event from the most recent confirmed update back to the earliest known activity.
Onapsis published a report examining AI adoption and cybersecurity challenges in ERP environments. The report found that 22% of surveyed organizations had experienced an AI-enabled incident involving exploitation of critical business platforms during the preceding 12 months.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
A global shift is underway as artificial intelligence becomes the top investment priority for cybersecurity among organizations, according to a recent PwC survey of nearly 4,000 business and technology executives. Sixty percent of respondents indicated that AI technologies are their primary focus for cybersecurity spending in the coming year, with key use cases including threat hunting, AI agents, event detection, and behavioral analysis. This surge in AI adoption is driven in part by ongoing skills shortages, with over half of organizations prioritizing AI and machine learning tools to close capability gaps. Additionally, 38% of companies are turning to managed service providers to access the necessary AI expertise. However, the rapid integration of AI into enterprise environments is not without significant risks. New research from LayerX reveals that AI has already become the leading uncontrolled channel for corporate data exfiltration, surpassing traditional risks like shadow SaaS and unmanaged file sharing. The report highlights that 45% of enterprise employees use generative AI tools, such as ChatGPT, Claude, and Copilot, with AI accounting for 11% of all enterprise application activity. Alarmingly, 67% of AI usage occurs through unmanaged personal accounts, leaving security teams with little visibility or control over sensitive data flows. The research found that 40% of files uploaded to generative AI platforms contain personally identifiable information (PII) or payment card information (PCI), and a significant portion of these uploads are conducted via personal accounts. Traditional data loss prevention (DLP) tools are often ineffective in this context, as they are not designed to monitor or control the new channels introduced by AI tools. Experts warn that the lack of governance and oversight around AI usage in enterprises creates substantial risks, including the potential for AI agents to access sensitive data beyond their intended scope if not properly managed. The PwC survey also notes that organizations are balancing investments between proactive technologies, such as monitoring and testing, and reactive measures like incident response and recovery. As AI becomes more deeply embedded in cybersecurity operations, the need for robust governance, least-privilege access for AI agents, and updated security controls is increasingly urgent. The evolving geopolitical landscape further complicates the risk environment, making it critical for organizations to understand both the opportunities and threats posed by AI in cybersecurity. The convergence of rapid AI adoption and insufficient controls underscores the importance of immediate action to secure enterprise data and workflows against emerging AI-driven threats.
Jun 29, 2026
Organizations are rapidly increasing their adoption of artificial intelligence (AI) technologies, but security measures are failing to keep pace, resulting in a widening exposure gap. Surveys from Red Canary and Tenable highlight that while security budgets and tool sophistication have grown, incident response times are slowing, and the attack surface is expanding—particularly as AI becomes embedded in business operations. Key targets remain email, identity, and endpoints, with a significant portion of organizations experiencing incidents in these areas. Despite efforts to consolidate security tools, most teams report longer detection-to-resolution times, and the business impact includes substantial financial losses, data breaches, and service disruptions. The rush to integrate AI has outstripped the ability to secure it, with most organizations adopting AI faster than they can implement effective protections. While many are aligning with frameworks like the EU AI Act and NIST AI RMF, few are translating these into practical controls such as data encryption, system testing, or robust identity management for AI systems. As AI pipelines and connections proliferate across productivity apps, browsers, and cloud services, new attack vectors emerge, leaving critical systems and data increasingly vulnerable. Proactive defense and continuous visibility are recommended to close the gap between AI innovation and enterprise security readiness.
Jul 12, 2026
ISACA's 2026 State of Cyber report found that organizations are deploying AI security capabilities faster than they are preparing to handle AI-related incidents. **Seventy-one percent** have not conducted an AI incident-response exercise, and only **3%** have mature formal runbooks for AI-specific incidents. The report highlights risks including sensitive-data exposure, AI-enabled phishing and fraud, scaled social engineering, and employee or insider misuse of generative AI. European security teams are also facing a growing operational burden: **38%** of surveyed IT and cyber professionals said their organizations had already sustained more attacks this year than during all of 2025, while **54%** expect a material attack within the next 12 months. Social engineering remains the most common threat, with AI helping attackers automate and refine targeting; defenders are using AI for detection, response, endpoint protection, and task automation, but persistent understaffing, underfunding, skills gaps, and burnout are limiting resilience.
Sep 22, 2026