AI Is Compressing Cyberattack Timelines and Targeting Ungoverned AI Identities, Sophos AI Security Report Finds
Sophos today released its AI Security 2026 Report, finding that attackers are operationalizing artificial intelligence (AI) to collapse attack workflows from weeks to days. The report finds that AI’s most immediate impact on cybercrime is speed, as well as a rise in attacks using identity as the primary initial access vector (IAV), rather than inventing new attack types at this stage.
“Attackers still need initial access, still move laterally, and still exfiltrate through observable channels. What has changed is the clock,” said John Peterson, Chief Technology Officer, Sophos. “For the first time we have observed AI being actively used as an operational force multiplier. While the tools and techniques were familiar, the speed of development, testing, and iteration was materially different. That is the AI threat that security teams need to prepare against. It means faster cycles and shorter windows to respond, with greater pressure on defenders...
Copyright of this story solely belongs to itvoice.in. To see the full text click HERE
