The world of cybersecurity is in a state of flux, and the rapid evolution of AI is at the forefront of this change. A recent study conducted during Infosecurity Europe 2026 has shed light on the growing concerns of cybersecurity professionals, with AI-powered attacks emerging as the top challenge they face. This finding is particularly intriguing, as it highlights the shift in focus from traditional threats to the emerging dangers posed by AI. What makes this development particularly fascinating is the potential for AI to both enhance and disrupt cybersecurity. On one hand, AI can automate threat detection and response, significantly improving efficiency. On the other hand, it can also be weaponized by attackers, creating a new breed of sophisticated threats. This raises a deeper question: how can we harness the power of AI while mitigating its risks? In my opinion, the key lies in striking a balance between innovation and caution. The study also revealed that a significant portion of cybersecurity professionals' time is wasted on chasing false positives and low-priority alerts. This is a critical issue, as it not only hampers productivity but also leads to alert fatigue, a phenomenon where security teams become desensitized to the constant stream of alerts, making it harder to identify genuine threats. This raises a broader question: how can we improve the effectiveness of threat intelligence to reduce alert fatigue and enhance operational efficiency? The answer, I believe, lies in the adoption of Continuous Threat Exposure Management (CTEM). CTEM is a growing framework that prioritizes and validates cyber risk, helping organizations to focus on the most critical threats. However, the survey found that only 28% of respondents have implemented such a program, indicating a significant gap in the industry. This raises a deeper question: why is there a lack of adoption of CTEM, and what can be done to bridge this gap? In my view, the answer lies in raising awareness and providing practical guidance. Boards are increasingly concerned about AI-driven threats and organizational preparedness. This is a positive development, as it indicates a growing recognition of the risks and opportunities presented by AI. However, it also raises a question: how can we ensure that boards are equipped with the necessary knowledge and tools to make informed decisions about AI-related cybersecurity issues? In my opinion, the answer lies in fostering a culture of cybersecurity literacy and providing regular updates on emerging threats and technologies. The study also revealed that trust in threat intelligence is a significant issue, with only 19% of respondents stating that they completely trust it to tell them what to fix first. This raises a deeper question: why is there a lack of trust in threat intelligence, and what can be done to build confidence? The answer, I believe, lies in improving the quality and transparency of threat intelligence, as well as providing more context and actionable insights. In conclusion, the study highlights the growing challenges faced by cybersecurity professionals in the age of AI. It is a call to action for the industry to adapt and evolve, while also raising important questions about the future of cybersecurity. As an expert, I believe that the key to addressing these challenges lies in a combination of innovation, caution, and collaboration. Only by working together can we ensure a safer digital future.
