The role of AI in cybersecurity has become a double-edged sword. While AI tools have significantly improved threat detection and response capabilities, they’ve also enhanced the scale and sophistication of cyber-attacks.

A recent global study from Kaspersky highlights this growing paradox, showing that nearly three-quarters of cybersecurity professionals are deeply concerned about the risks AI-amplified attacks pose.

This concern is not unfounded – 46% of respondents believe that most of the cyber-attacks their organisations experienced in the last year involved AI technologies.

Cyber Defense Today: Confidence and Challenges

Cybersecurity remains a strategic priority, but confidence in current protective measures is uneven. While 34% of respondents describe their organisations’ defenses as comprehensive, 21% acknowledge significant gaps, with some even labeling their protection as “poor.” Larger enterprises tend to employ dedicated specialists, with 23% of enterprises having full-time cybersecurity staff compared to 18% of small and medium-sized businesses (SMBs).

However, confidence sharply declines among IT professionals who only spend part of their time on cybersecurity. Only 12% of these professionals believe their organisations’ defenses are sufficient, compared to 51% of those fully dedicated to the field.

Key Stats:

• 59% of organisations have implemented measures to ensure better visibility across devices, networks, and access points to detect anomalies.
• 50% report needing more qualified cybersecurity staff, but 39% struggle to find suitable candidates.
• 46% say AI played a role in the majority of recent attacks on their systems.

AI-driven Attacks a Growing Concern

As cyber-attacks continue to surge, phishing remains the most common threat, reported by 49% of organisations. Other significant threats include covert malware installations (34%), ransomware (29%), and business email compromise (20%). Regionally, Europe leads in phishing attacks (56%), while ransomware is most common in the Asia-Pacific (38%).

Alarmingly, organisations that have seen a sharp increase in attacks are particularly concerned about emerging threats, such as zero-day vulnerability exploitation and distributed denial-of-service (DDoS) attacks.

Regional Insights:

• CIS countries report the lowest perception of AI involvement in attacks (34%).
• The META region leads in identifying AI-driven attacks, with 53% acknowledging the threat.

AI’s dual role in cybersecurity is evident. On one hand, it enhances threat detection and automates tedious workflows, improving response times and accuracy. On the other hand, it empowers attackers with tools to bypass security measures, find system vulnerabilities, and launch multi-layered, coordinated assaults.

The study reveals that organisations are rapidly adopting AI-enabled tools:

• 46% already use AI to manage system vulnerabilities.
• 47% employ AI to respond to and neutralise threats automatically.
• 51% are actively implementing AI to mediate attack damage.

Despite these advancements, 43% of respondents cite the lack of AI-powered tools as a critical weakness in their defenses.

Looking ahead, 88% of respondents expect AI-driven cyberattacks to increase. Social engineering attacks, powered by AI-assisted open-source intelligence (OSINT), are predicted to become more effective. Additionally, 48% believe AI will enable cybercriminals to exploit system vulnerabilities more easily and increase the volume of attacks.

Recommended reading

• Fraud and Scam Complaints On the Rise
• Small-Medium Businesses Lose More than £3,000 Each To Fraud
• Black Friday Fraud: Brits Lost £11.5M to Holiday Scams

The anticipated consequences of failing to adapt cybersecurity measures are severe:

• 58% foresee heightened risks of confidential data breaches.
• 52% predict declines in customer trust and financial losses.
• 47% worry about reputational damage.

To counter AI-powered threats, organisations must prioritise a multi-layered security approach:

• Enhanced Visibility: Nearly 59% of organisations have already improved their infrastructure monitoring to detect anomalies faster.
• AI-Powered Tools: Automation and machine learning are critical for adapting to evolving threats, with 94% agreeing on the necessity of AI-enhanced solutions.
• Skilled Workforce: Recruiting and training cybersecurity experts remains a top priority, as acknowledged by 60% of respondents.
• External Expertise: Leveraging managed services and external support can help bridge skill gaps and improve readiness.

“The rise of AI-driven cyberattacks marks a turning point in the cybersecurity landscape,” said Alexey Vovk, information security director at Kaspersky.

“Organisations must act now to fortify their defenses. This includes investing in AI-powered tools, training employees to recognize threats related to AI, development and implementation of cybersecurity controls for products and services with AI.

“Failure to adapt could lead to significant financial, operational, and reputational damage. Preparedness is not just an option – it’s a necessity in this new era of cyber-threats.”