Generative artificial intelligence is increasingly permeating the field of cybersecurity, yet corporate leaders remain divided on its necessity. According to a recent study by Splunk, 52% of Chief Information Security Officers (CISOs) advocate for the development and implementation of advanced technologies, while only 33% of board members share their enthusiasm.
The cybersecurity threat landscape is evolving rapidly. Splunk’s research also uncovered an intriguing trend: 41% of security leaders report that complying with data protection requirements has become easier, despite the growing frequency and sophistication of attacks. This improvement is largely attributed to advancements in automation and data analysis tools.
A majority of CISOs have already integrated neural networks into their workflows. Of these, 39% use AI to identify risks, another 39% to analyze threats, and 35% to prioritize threats demanding immediate attention. Intelligent systems process vast amounts of data on potential dangers, enabling organizations to focus on critical issues.
However, cybercriminals are not idle—they, too, are leveraging generative AI. Approximately 32% of attackers use it to enhance existing hacking techniques, 28% employ it to scale up the number of attacks, and 23% create entirely new types of cyber threats. Neural networks allow hackers to automate processes and identify vulnerabilities in security systems with unprecedented efficiency.
Meanwhile, a significant disconnect persists between CISOs and boards of directors regarding cybersecurity funding. Only 29% of CISOs feel adequately resourced, whereas 41% of board members believe budgets are more than sufficient.
This disparity poses tangible risks. Sixty-four percent of CISOs directly link successful cyberattacks on their organizations to a lack of executive support. Security leaders argue that their warnings are dismissed, the risks of cyberattacks are underestimated, and their projections are deemed overly pessimistic.
CISOs have valid reasons for concern. While AI bolsters defenses, it also introduces significant risks. Thirty-six percent of CISOs identified AI-driven attacks as their primary concern, followed by ransomware (24%) and data breaches (23%).
Greg Clark, Head of Product Management at OpenText Cybersecurity, emphasizes the pivotal role of employees in safeguarding information. Phishing schemes and insider threats are becoming increasingly sophisticated. Regardless of a company’s size, organizations must not only deploy AI-driven threat detection systems but also invest in comprehensive employee training across all departments.
The industry continues to face a talent shortage, but 86% of survey participants believe AI can help attract more entry-level professionals. Furthermore, 65% are confident that AI will enhance the productivity of experienced professionals by automating routine tasks.
Organizations are also working to strengthen collaboration between security teams and legal departments. Ninety-one percent of companies have increased security training for legal and compliance professionals, while 90% now educate security specialists on regulatory requirements and legal frameworks.
Statistics show that nearly 80% of data breaches are caused by weak passwords. Companies are advised to adopt password managers and modern authentication systems. Clear policies on password creation and usage should be established, and employees must understand the criteria for strong passwords and the importance of regular updates.
Amid economic instability, many attempt to cut back on cybersecurity spending. However, the financial toll of ransomware attacks can amount to millions of dollars. Beyond direct financial losses, companies suffer a loss of trust from clients and business partners, causing irreparable harm to their reputation and long-term prospects.