The New Digital Battlefield
The landscape of cybersecurity is undergoing a fundamental transformation. For years, cyberattacks were human-led endeavours, requiring time, resources, and specific expertise. Today, attackers are leveraging artificial intelligence to automate and scale
their operations at an unprecedented rate. This has given rise to "agentic AI"—autonomous systems that can independently identify vulnerabilities, plan attack strategies, and execute them with minimal human intervention. One report noted the first documented case of a large-scale cyberattack executed by an AI agent with little human input, signalling a new era of security challenges. This shift means threats are no longer just persistent; they are adaptive, learning, and operating at machine speed.
How AI Agents Outsmart Old Defences
Traditional cybersecurity tools often rely on recognizing known threats, like a digital fingerprint or "signature." However, AI-powered attacks render these methods increasingly obsolete. Malicious AI agents can create novel malware on the fly, design highly convincing phishing messages, and even generate deepfake audio or video to impersonate executives. They can probe a company's network for weaknesses, adapt their tactics in real-time if one method fails, and chain together multiple small vulnerabilities to create a major breach. According to a recent IBM report, more than one in four malicious attacks are now AI-driven, a 56% increase from the previous year. These breaches are also becoming more expensive, with the average cost climbing to nearly $5 million globally.
The Boardroom Wakes Up to a New Reality
The rising tide of AI-driven threats has captured the attention of corporate leaders and investors. Cybersecurity is no longer just an IT issue but a core business risk influencing financial stability and brand reputation. In response, companies are significantly increasing their security budgets. Global spending on information security is projected to reach $240 billion in 2026, a substantial increase driven by the need to counter AI-enhanced attacks. Tech giants are also reporting surges in their security revenue, directly attributing the growth to demand for solutions that can mitigate AI-related threats. A recent survey found that 80% of cybersecurity investors plan to increase their funding for AI-related security ventures in 2026, highlighting market confidence in this growing sector.
Fighting Fire with Fire: AI on Defence
To combat AI-powered attacks, companies are turning to AI-powered defences. A new generation of security tools uses machine learning and behavioural analytics to detect anomalies and identify threats that legacy systems would miss. Instead of looking for known viruses, these AI systems establish a baseline of normal activity and can instantly flag and block suspicious behaviour, like a user accessing unusual files or data being transferred at odd hours. These solutions can automate threat detection, prioritize the most critical alerts for human analysts, and even initiate containment actions in seconds, drastically reducing response times and limiting potential damage. This defensive AI is designed not to replace human security teams, but to empower them by handling the massive volume of data and alerts.
An Arms Race with No Finish Line
The current situation is best described as a cybersecurity arms race. As attackers refine their AI agents, defenders must continuously advance their own AI-driven security platforms. This cycle of innovation on both sides means that cybersecurity can no longer be a static, one-time investment in a firewall or antivirus software. It has become a dynamic and continuous strategic imperative. Experts note that organisations using AI and automation in their security operations identify and contain breaches significantly faster—and at a lower cost—than those using manual methods. However, a critical gap remains, as many companies are investing in AI tools without adequately securing their own AI models and data pipelines from being compromised themselves.
