AI Turns Familiar Cyberattacks Into a Race Against Time

Artificial Intelligence

AI Turns Familiar Cyberattacks Into a Race Against Time

IBM’s Steve Wallin talks to SecurityWeek on the effect of AI-driven attacks on enterprise defenses.

October 13, 2026 (7:00 AM ET)

+ Flipboard + Reddit [+ Whatsapp](https://web.whatsapp.com/send?text=AI Turns Familiar Cyberattacks Into a Race Against Time https://www.securityweek.com/ai-turns-familiar-cyberattacks-into-a-race-against-time/) [+ Whatsapp](whatsapp://send?text=AI Turns Familiar Cyberattacks Into a Race Against Time https://www.securityweek.com/ai-turns-familiar-cyberattacks-into-a-race-against-time/) + Email

Threat Intelligence

In the AI era, phishing remains the top attack vector in both use (17% of breaches) and breach costs (averaging at $5.29 per breach) according to the IBM Cost of a Data Breach Report 2026 . AI creates more personalized content for phishing with higher success rates. At the same time, AI can identify vulnerabilities, use the phished entry point and elevate privileges for lateral movement at greater speed.

None of this is new – cyberattacks haven’t changed with AI. “It just allows attackers to do the same familiar things much faster and at greater scale than ever before. The pressure comes from minimizing the time for defenders to respond,” says Steve Wallin, director of core integration and R&D labs leader at IBM UK.

For now, AI-generated attacks are still in the minority – little more than 20% of all attacks. But the writing (written by AI) is on the wall, and it is incumbent on enterprises to improve their security defenses now before the tsunami arrives in full.

SecurityWeek talked to Wallin on how enterprises should respond to this growing AI threat. Again, it is nothing new – it must just be done better.

It starts with a basic maxim that is as old as the ancient Delphic Oracle: ‘know thyself’. “Organizations must understand their existing security posture. The key to defending against this increasing volume of attacks and decreasing time to respond is again nothing new. It means focusing on proactive rather than reactive defense. It is security by design from the ground up rather than a bolt-on reaction,” said Wallin.

Proactive cyberdefense is a combination of understanding how attacks work, understanding the enterprise infrastructure and business, and being prepared for all possibilities.

Advertisement. Scroll to continue reading.

“Zero trust is fundamental to stay in control of credentials, access, and enterprise data. You can no longer build a moat or wall around the infrastructure, so zero trust security by design must be built into the infrastructure, the applications, the API entry points, and the data management,” said Wallin. “This can only be achieved with a full understanding of what is important to the business.”

Interestingly, the father of zero trust, John Kindervag, has published a new book titled Cyber Resilience at Machine Speed: The Zero Trust Model for the AI Era . “Any AI-generated packet still has to move across the same network that attackers have always had to traverse – and correctly implemented zero trust can still halt it,” he told SecurityWeek . He echoes Wallin’s view: the principles of cybersecurity have not been altered by the arrival of AI-driven cyberattacks.

The only thing that has really changed is the statistical likelihood of a breach. This likelihood increases the need for resilience. But if defense starts from the position of ‘know thyself’, the enterprise will understand its key areas. Defensive use of AI can help here. “It is increasingly difficult for everything to be completely free of all unknown vulnerabilities. We can use AI to help us with prioritization, and risk management. We can use it to automate, to discover and to understand, so that we can continuously improve the environments that we’re running as an organization.”

This still doesn’t guarantee that a catastrophic breach won’t happen, so resilience must also include recovery of damaged data to ensure business continuity. This isn’t new, just more pressing – a cyber vault backup facility is necessary. This can be built internally using air-gapping and WORM technology; or acquired externally. The IBM Z mainframe, for example, offers a cyber vault designed for high-end workloads such as banking and core financial services, using automated validation, forensic tools, and immutable backups to test and recover corrupted data rapidly.

AI hasn’t changed the fundamentals of cybersecurity, it has simply made good cybersecurity by design, resilience and recovery more important.

Written By

Kevin Townsend

Kevin Townsend is a Senior Contributor at SecurityWeek. He has been writing about high tech issues since before the birth of Microsoft. For the last 15 years he has specialized in information security; and has had many thousands of articles published in dozens of different magazines – from The Times and the Financial Times to current and long-gone computer magazines.

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Latest News

AI Turns Familiar Cyberattacks Into a Race Against Time illustration

iRhythm Data Breach Impacts at Least 360,000 People

Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach

Cyberattack Prompts Grocery Giant Ahold Delhaize to Disconnect Systems

Small AI Models Could Soon Self-Replicate on IoT Devices, Anthropic Warns

US Seeks Alleged Chinese Hafnium Hacker With $10 Million Reward

Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day

Adobe Patches 176 Vulnerabilities Across 11 Products

Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

## Webinar: The AI Access Risk Already in Your Google Workspace

October 19, 2026

AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.

## Virtual Event: Zero Trust & Identity Strategies Summit 2026

October 14, 2026

Join as we decipher the world of zero trust and share war stories on securing an organization by eliminating implicit trust and continuously validating every stage of a digital interaction.

People on the Move

Adam Zolle has joined Nike as CISO.

Jeff Hackett has been appointed CFO at internet intelligence provider Censys.

Accenture Federal Services has named Nathaniel Parker as CISO.

More People On The Move

Expert Insights

## AI Has Changed Attack Speed, Not Security Fundamentals

AI Turns Familiar Cyberattacks Into a Race Against Time illustration

As AI accelerates vulnerability discovery and exploitation, so-called virtual patching still comes down to defense-in-depth and strong application security fundamentals. (Joshua Goldfarb)

## Four Cyber Threats Harboring Big Plans for the Future

AI Turns Familiar Cyberattacks Into a Race Against Time illustration

AI, supply-chain exposure, quantum computing and geopolitical conflict are testing security programs. Preparing for disruption must become part of day-to-day operations. (Steve Durbin)

## Begin at the End: How to Enable Agentic Remediation

AI Turns Familiar Cyberattacks Into a Race Against Time illustration

Agentic remediation is not an act of faith. We are talking about fixing known problems, not judgment calls about unfamiliar risk. (Nadir Izrael)

## “We Think the Security Control Is Working” Is No Longer Good Enough

AI Turns Familiar Cyberattacks Into a Race Against Time illustration

Point-in-time audits and sampled assessments offer only snapshots; continuous control monitoring provides evidence that security controls are working today. (Sravish Sridhar)

## This Key Will Self-Destruct: An Open Standard for Revocable API Keys

AI Turns Familiar Cyberattacks Into a Race Against Time illustration

Every leaked credential should be dead, or dying, within sixty seconds of being found. Here’s a proposal to make that the default. (Matt Honea)

+ Flipboard + Reddit [+ Whatsapp](https://web.whatsapp.com/send?text=AI Turns Familiar Cyberattacks Into a Race Against Time https://www.securityweek.com/ai-turns-familiar-cyberattacks-into-a-race-against-time/) [+ Whatsapp](whatsapp://send?text=AI Turns Familiar Cyberattacks Into a Race Against Time https://www.securityweek.com/ai-turns-familiar-cyberattacks-into-a-race-against-time/) + Email

Security Community

Stay Intouch

About SecurityWeek

News Tips

Got a confidential news tip? We want to hear from you.

Submit Tip

Advertising

Reach a large audience of enterprise cybersecurity professionals

Subscribe to the SecurityWeek Daily Briefing and get the latest content delivered to your inbox.

AI Turns Familiar Cyberattacks Into a Race Against Time

Artificial Intelligence