InfoWatch experts report that AI-driven cyber defense currently holds a tactical advantage. However, AI is increasingly utilized in cyberattacks, with 16% of global network breaches now involving AI tools. Phishing attacks are particularly affected, as AI is employed in 86% of these incidents.
The landscape of automated threats is shifting rapidly. Traffic from malicious AI bots and scouts increased by 187% over the past year, while traffic from autonomous AI agents surged nearly 80-fold. Furthermore, AI allows attackers to identify zero-day vulnerabilities with 70% greater efficiency than traditional methods.
Defensive AI systems are showing significant performance gains. NDR/XDR extensions detect APT attacks twice as fast, reducing response times from days to minutes. AI-powered email gateways block 94% of phishing attempts, while behavioral analysis tools reduce insider threat risks by 45%.
Operational efficiency for security analysts has also improved, with AI assistants reducing the workload for initial alert triage by 60%. Experts emphasize that integrating AI into all monitoring levels, from NGFW to industrial network anomaly detection, is now a necessity for organizational survival.





