Loading story…
Cybersecurity leaders are facing a rapidly evolving threat landscape shaped by the integration of artificial intelligence (AI) into both attack and defense strategies. According to a report from VikingCloud, 71% of surveyed security leaders have observed an increase in the frequency of cyberattacks over the past year, with 61% noting that the impact of these incidents has also grown. Nation-state actors are increasingly targeting a broader range of industries, including retail, healthcare, and hospitality, often leveraging AI to scale their operations and exploit third-party software vulnerabilities. The use of generative and agentic AI by attackers has enabled more sophisticated phishing, social engineering, and ransomware campaigns, with deepfakes and voice-based fraud becoming more prevalent. Security leaders report that AI is now commonly used to automate the creation of polished, linguistically sophisticated phishing emails, making them harder to detect and more convincing to recipients. Attackers are also targeting AI assistants embedded in workplace tools, using malicious prompts hidden in emails to manipulate these systems into leaking sensitive information or executing unauthorized actions. Research from Columbia University and the University of Chicago, as well as Barracuda Research, has documented how attackers exploit weaknesses in AI-driven security tools and tamper with systems that use retrieval-augmented generation (RAG), leading to unreliable outputs and poor decision-making. Despite these challenges, organizations are increasingly adopting AI to bolster their defenses, automating threat detection, identity management, and patching to free up security teams for more strategic tasks. However, a significant skills gap persists, as highlighted by the AI Workforce Consortium, which found that AI technical skills are now required across 50 job roles in ICT, yet the market lacks enough professionals with these capabilities. The demand for expertise in areas such as LLM architecture, prompt engineering, and generative AI is outpacing supply, putting additional pressure on security teams. Security leaders are also concerned about reduced government oversight, with many citing cuts to agencies like CISA and NSA as factors that have increased organizational vulnerability. The interplay between AI-driven attacks and defenses is creating new security, compliance, and governance challenges that organizations must address to safely deploy advanced AI systems. As both attackers and defenders race to leverage AI, the need for skilled professionals and robust governance frameworks has never been greater. The evolving threat landscape underscores the importance of continuous learning and adaptation for cybersecurity teams. Organizations must remain vigilant against AI-powered threats while investing in workforce development to close the skills gap. The integration of AI into cybersecurity is not only transforming technical requirements but also reshaping risk management and strategic decision-making at the highest levels.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
4 events from the most recent confirmed update back to the earliest known activity.
The article recommended AI-aware detection, memory validation, isolation, least-privilege access, zero-trust verification, and employee awareness training to mitigate risks from AI assistants and agentic systems.
The reporting outlined attacker experimentation with prompt injection, retrieval-augmented generation poisoning, and abuse of AI-enabled security workflows to manipulate AI assistants and downstream actions.
By 2025, research from Columbia University, the University of Chicago, and Barracuda Research described how attackers were using generative AI to improve spam, phishing, and malicious code, while also targeting AI systems as new attack surfaces.
A Help Net Security report said cybersecurity professionals were changing their defensive strategies in response to the rise of AI-powered threats. The development reflects earlier industry adaptation to AI-enabled attacks before the later 2025 research-focused reporting.
4 references tracked. Mallory keeps watching after this page renders.
helpnetsecurity.com
Open sourcehelpnetsecurity.com
Open sourcehelpnetsecurity.com
Open sourcehelpnetsecurity.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Artificial intelligence is rapidly transforming both the threat landscape and defensive strategies in cybersecurity, prompting CISOs and security leaders to rethink their approaches. A global study by Gigamon found that 86% of CISOs now view metadata and packet-level data as essential for detecting threats in complex hybrid cloud environments, but 97% admit to making trade-offs that leave visibility gaps. The rise of AI-driven attacks is fueling demand for real-time visibility and observability tools, with 75% of CISOs regarding public cloud as their highest security risk and 73% considering moving workloads back to private clouds. Security teams are investing heavily in AI-specific security tools, with 73% of companies spending over $1 million annually, yet 70% cite the rapid pace of AI development as their top concern. Recent high-profile breaches, such as those at LexisNexis Risk Solutions and McLaren Health Care, illustrate the increasing scale and sophistication of attacks, often amplified by AI. AI is accelerating the reconnaissance phase of attacks, enabling adversaries to map environments and identify vulnerabilities with unprecedented speed and precision, though human direction remains necessary for effective exploitation. The proliferation of AI-generated code, including through practices like 'vibe coding,' introduces new risks as less experienced developers may overlook security fundamentals, leading to insecure applications. Agentic AI systems, which act autonomously or on behalf of users, present urgent challenges in authentication, authorization, and identity management, with experts calling for scalable frameworks and robust credentials to prevent security lapses. CISOs are urged to build security into the design phase of software development, leveraging platform-native controls and enforcing policies like Row Level Security to minimize risk. The integration of AI into security operations is seen as both an opportunity and a challenge, requiring adaptive access solutions, post-quantum cryptography, and continuous monitoring. As AI reshapes digital transformation, organizations must balance the benefits of rapid innovation with the imperative to secure their environments against increasingly sophisticated, AI-powered threats. The consensus among experts is that security must evolve in tandem with AI capabilities, emphasizing proactive risk management, cryptographic agility, and a culture of security awareness across all levels of the organization.
Jun 29, 2026
Artificial intelligence is fundamentally reshaping the cybersecurity landscape, introducing both new opportunities and significant risks for organizations and professionals. The adoption of AI tools is accelerating the learning curve for cybersecurity practitioners, enabling faster skill acquisition, automated reconnaissance, and streamlined exploit generation, as highlighted by experts who advocate for integrating AI into bug hunting and security research workflows. However, this technological leap is also disrupting traditional career paths, with studies showing a marked decline in entry-level cybersecurity and IT jobs as AI automates routine tasks such as help desk support, manual testing, and security monitoring. Industry leaders emphasize the need for IT teams to adapt by acquiring new skillsets and focusing on strategic problem-solving, as the majority of job skills are expected to change dramatically by 2030 due to AI's influence. Concurrently, the rise of autonomous AI agents introduces a new class of security risks, as these systems possess the ability to make independent decisions, access sensitive data, and execute code across networks, often in ways that are opaque and difficult to audit. The lack of robust identity management and oversight for these agentic systems leaves organizations vulnerable to novel attack vectors, including black box attacks where the root cause of malicious or erroneous actions is nearly impossible to trace. Deepfake technology, powered by generative AI, is rapidly becoming a favored tool for social engineering attacks, with a significant increase in organizations reporting incidents involving AI-generated impersonations of executives and employees. This trend is eroding traditional trust mechanisms, such as voice and video verification, and forcing security teams to rethink their authentication strategies. Ethical concerns are also at the forefront, as CISOs and boards are urged to monitor for red flags such as loss of human agency, lack of technical robustness, and data privacy risks associated with AI deployments. Regulatory frameworks and responsible AI governance are becoming essential to ensure that AI systems are deployed safely and ethically, particularly in sectors like financial services where the stakes are high. The convergence of these factors is creating a dynamic environment where cybersecurity professionals must continuously adapt to the evolving threat landscape, leveraging AI for defense while remaining vigilant against its misuse. As organizations rush to deploy AI-driven solutions, the need for comprehensive security strategies, ongoing workforce development, and ethical oversight has never been more critical. The future of cybersecurity will be defined by the ability to harness AI's power responsibly while mitigating its inherent risks, ensuring both operational resilience and trust in digital systems.
Jun 29, 2026
Security leaders across industries are increasingly concerned about the rapid evolution of AI-enabled cyberattacks, which are now among the top threats facing enterprises. Recent research highlights that cybercriminals are leveraging artificial intelligence to automate and enhance attack chains, including the use of deepfakes, automated phishing, and AI-generated malware. These AI-driven threats are capable of executing full attack sequences autonomously, from reconnaissance to data exfiltration, at speeds and scales previously unattainable by human operators. Security teams are responding by investing heavily in AI-powered defensive tools, aiming to accelerate detection, triage, and containment of threats. However, experts caution that AI should be used as a 'copilot' rather than an 'autopilot,' emphasizing the necessity of human oversight to ensure effective and responsible use of these technologies. The human element remains a critical vulnerability, as attackers use generative AI to craft highly convincing social engineering campaigns, including synthetic audio and video, which can bypass traditional awareness programs. The arms race between offensive and defensive AI is intensifying, with both sides seeking to outpace the other in sophistication and automation. Security leaders are also grappling with the challenge of integrating AI into their broader risk management and governance frameworks, ensuring that AI-driven solutions align with organizational policies and regulatory requirements. The expanding role of the CISO now includes oversight of AI risk, reflecting the technology's growing impact on enterprise security posture. As AI becomes more embedded in both attack and defense, organizations are re-evaluating their incident response strategies, workforce training, and investment priorities. The shift towards AI-driven security operations is not without challenges, including the risk of over-reliance on automation and the need for continuous adaptation to evolving threat tactics. Industry studies indicate that while AI can handle routine security tasks, complex and strategic decision-making still requires skilled human analysts. The ongoing development of AI in cybersecurity is reshaping the landscape, demanding new approaches to both technology deployment and leadership. Security teams are urged to balance innovation with caution, ensuring that AI augments rather than replaces critical human judgment. The future of enterprise security will likely be defined by the effectiveness of this human-AI partnership in countering increasingly sophisticated, AI-powered adversaries.
Jun 29, 2026