How AI-driven attacks are pushing cybersecurity to the brink

The modern cybersecurity landscape is grappling with its most formidable threat yet, as sophisticated AI-driven attacks put security teams under intense pressure. Allan Juma, a cybersecurity expert at ESET, explains in his article "Making sense of SOC alert overwhelm in the age of AI" that the issue isn't a lack of awareness of threats.

Instead, security teams are overwhelmed by an overwhelming amount of irrelevant data, struggling to separate legitimate attacks from the noise. The crisis is clear: AI-driven attacks have surged by 56% year-over-year, with one in four organizations falling prey to AI-powered breaches. This alarming trend is further compounded by the fact that 46% of security alerts turn out to be false positives, and a shocking 42% of alerts go entirely uninvestigated.

The strain on security operations is exacerbated by a skills shortage: 59% of cybersecurity teams are grappling with critical talent gaps, a 15% increase from the previous year. The nature of these threats is evolving as well. Mick Amelishko, an AI advocate at Sumsub, notes that agentic AI is becoming increasingly autonomous. "The biggest shift moving into the 'agentic' way of working is agency," he explains.

"Last year, AI was just an assistant, helping with tasks like refining writing or providing basic recommendations. Now, AI can interact with the outside world, browsing the internet, making independent purchases, registering on websites and even transacting directly from bank accounts if granted permission." As AI takes on a more active role in cyberattacks, the need for human intervention diminishes, yet the volume and speed of automated threats continue to rise unchecked.