Cybersecurity landscape shifts as AI accelerates threats and shadow AI risks

The cybersecurity landscape is undergoing a rapid transformation driven by the industrialization of cybercrime and the integration of artificial intelligence. Threat actors are increasingly using AI to automate reconnaissance, exploit vulnerabilities, and develop malware, significantly compressing the time between vulnerability disclosure and exploitation from several days to under 48 hours.

To combat these evolving threats, Sophos has launched Sophos AI Defense. This solution is designed to detect and manage ‘shadow AI’—the unauthorized use of AI tools and agents by employees—which poses significant risks to data confidentiality and integrity. The tool integrates controls across devices, networks, identities, and browsers to provide real-time visibility and policy enforcement.

Other industry observations highlight critical vulnerabilities in the digital ecosystem. Prosegur Cybersecurity reports that supply chain attacks remain a major challenge, noting that a significant portion of security breaches in Spain involve third-party providers. Additionally, experts at the CyberSEG360° event in Geneva emphasized that while AI offers defensive advantages in mapping exposure and automating SOC tasks, human expertise remains essential for complex decision-making and containment.