{"id":14356,"date":"2026-11-05T10:12:53","date_gmt":"2026-11-05T08:12:53","guid":{"rendered":"https:\/\/www.withsecure.com\/?p=14356"},"modified":"2026-11-05T10:12:56","modified_gmt":"2026-11-05T08:12:56","slug":"ai-cyber-defense-false-sense-of-security","status":"publish","type":"post","link":"https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/ai-cyber-defense-false-sense-of-security\/","title":{"rendered":"AI cyber defense false sense of security"},"content":{"rendered":"<section\n    class=\"wp-block-one-column-block edwp-block js-wp-block-one-column-block wp-block-one-column-block--content-1 wp-block-one-column-block--meta-sharing layout--spacing-xxxxl-top layout--spacing-xl-bottom\"\n    >\n    <div class=\"wp-block-one-column-block__container\">\n                                                                                                                                    <div class=\"wp-component-image__wrapper wp-block-one-column-block__image fade-in\">\n                    <\/div>\n                                                                    <div class='wp-block-one-column-block__meta-sharing-grid'><div class=\"wp-component-content wp-component-content--default wp-block-one-column-block__content fade-in\">\n            <h1 class=\"wp-component-heading text--h2 wp-component-content__title\">\n    AI in Cyber Defense: <span class=\"blue-text\">Why Having AI Doesn\u2019t Mean Being Secure<\/span><\/h1>                    <div class=\"wp-component-content__inner\">\n                                                    <div class=\"wp-component-content__meta\">\n                                                    <span class=\"wp-component-content__content-type\">\n                                Blog                            <\/span>\n                                                                            <span class=\"wp-component-content__meta-categories\">\n                                                                    <span class=\"wp-component-content__meta-category\">\n                                        AI                                    <\/span>\n                                                                    <span class=\"wp-component-content__meta-category\">\n                                        AI Security                                    <\/span>\n                                                            <\/span>\n                                                                                                    <span class=\"wp-component-content__meta-date\">\n                                Nov 5, 2026                            <\/span>\n                                                                    <\/div>\n                                            <\/div>\n                <\/div><section\n    class=\"wp-block-sharing-icons edwp-block wp-block-sharing-icons--disable-border wp-block-sharing-icons--content-1 wp-block-sharing-icons--disable-container wp-block-one-column-block__sharing fade-in wp-block-one-column-block__sharing fade-in\"\n    >\n    <div class=\"wp-block-sharing-icons__container\">\n        <div class=\"wp-block-sharing-icons__inner\">\n                            <p class=\"wp-block-sharing-icons__title fade-in\">\n                    Share this                <\/p>\n                        <div class=\"wp-component-socials wp-component-socials--dark-mode\">\n    \n            <a\n            href=\"https:\/\/www.linkedin.com\/shareArticle?mini=true&#038;url=https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/ai-cyber-defense-false-sense-of-security\/&#038;title=AI%20cyber%20defense%20false%20sense%20of%20security\"\n            target=\"_blank\"\n            rel=\"noreferer noopener\"\n            class=\"wp-component-socials__link\"\n            title=\"Share on Linkedin\"\n        >\n            <svg class='edwp-icon edwp-icon--xlg js-icon ' aria-hidden='true'>\n                <use xlink:href='#linkedin'><\/use>\n            <\/svg>        <\/a>\n    \n            <a\n            href=\"http:\/\/x.com\/share?text=AI cyber defense false sense of security&#038;url=https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/ai-cyber-defense-false-sense-of-security\/\"\n            target=\"_blank\"\n            rel=\"noreferer noopener\"\n            class=\"wp-component-socials__link wp-component-socials__link--twitter\"\n            title=\"Share on Twitter\"\n        >\n            <svg class='edwp-icon edwp-icon--xlg js-icon ' aria-hidden='true'>\n                <use xlink:href='#x'><\/use>\n            <\/svg>        <\/a>\n    \n    \n    <\/div>\n        <\/div>\n    <\/div>\n<\/section>\n<\/div>                                                                            <div class=\"wp-component-image__wrapper wp-block-one-column-block__image fade-in\">\n                    <figure class=\"wp-component-image__figure\">\n                                            <img loading=\"lazy\" decoding=\"async\" width=\"1920\" height=\"1080\" src=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1.jpg.webp\" class=\"wp-component-image\n                            wp-component-image--desktop\n                            wp-component-image--mobile\n                            wp-component-image--ratio-content-3-2 wp-component-image--fit-cover\" alt=\"AI Security hero image with iceberg\" srcset=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1.jpg.webp 1920w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-300x169.jpg.webp 300w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-1024x576.jpg.webp 1024w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-768x432.jpg.webp 768w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-1536x864.jpg.webp 1536w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-447x251.jpg.webp 447w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-700x394.jpg.webp 700w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-260x146.jpg.webp 260w\" sizes=\"auto, (max-width: 1920px) 100vw, 1920px\" \/>                                                    <\/figure>\n                    <\/div>\n                                                                                <\/div>\n<\/section>\n\n\n<section\n    class=\"wp-block-one-column-block edwp-block js-wp-block-one-column-block wp-block-one-column-block--content-1 layout--spacing-xxxl-bottom\"\n    >\n    <div class=\"wp-block-one-column-block__container\">\n                                                                                                                                    <div class=\"wp-component-image__wrapper wp-block-one-column-block__image fade-in\">\n                    <\/div>\n                                                                                <\/div>\n<\/section>\n\n\n<section\n    class=\"wp-block-two-column-block edwp-block js-wp-block-two-column-block wp-block-two-column-block--content-1 wp-block-two-column-block__left--align-y-top wp-block-two-column-block__right--align-y-top wp-block-two-column-block--split-sidebar layout--none-top layout--spacing-xxxl-bottom\"\n    data-block-id=\"block_975522864eeaba7d47e981dbdebbf5dd\"\n    >\n    <div class=\"wp-block-two-column-block__container row-load\">\n                                                        <div class=\"wp-block-two-column-block__left\">\n                                <nav\n    class=\"wp-component-content-navigation wp-block-two-column-block__content-nav js-content-navigation\"\n    data-bem-base=\"wp-component-content-navigation\"\n    data-nav-column=\"left\"\n    data-nav-type=\"auto\"\n>\n            <p class=\"wp-component-content-navigation__title\">\n            Content        <\/p>\n    \n    <div class=\"wp-component-content-navigation__mobile\">\n        <label class=\"wp-component-content-navigation__mobile-label\">\n            <span class=\"wp-component-content-navigation__mobile-label-text\">\n                Content navigation            <\/span>\n            <select class=\"wp-component-content-navigation__select js-content-navigation-select\">\n                <option value=\"\">\n                    Select a section                <\/option>\n                            <\/select>\n        <\/label>\n    <\/div>\n\n    <div class=\"wp-component-content-navigation__desktop\">\n        <div class=\"wp-component-content-navigation__list-wrapper\">\n            <span\n                class=\"wp-component-content-navigation__indicator js-content-navigation-indicator\"\n                aria-hidden=\"true\"\n            ><\/span>\n            <ul class=\"wp-component-content-navigation__list js-content-navigation-list\">\n                            <\/ul>\n        <\/div>\n    <\/div>\n<\/nav>\n<section\n    class=\"wp-block-sharing-icons edwp-block wp-block-sharing-icons--disable-border wp-block-sharing-icons--disable-container wp-block-two-column-block__share wp-block-two-column-block__hide-mobile wp-block-two-column-block__share wp-block-two-column-block__hide-mobile\"\n    >\n    <div class=\"wp-block-sharing-icons__container\">\n        <div class=\"wp-block-sharing-icons__inner\">\n                            <p class=\"wp-block-sharing-icons__title fade-in\">\n                    Share this story                <\/p>\n                        <div class=\"wp-component-socials wp-component-socials--dark-mode\">\n    \n            <a\n            href=\"https:\/\/www.linkedin.com\/shareArticle?mini=true&#038;url=https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/ai-cyber-defense-false-sense-of-security\/&#038;title=AI%20cyber%20defense%20false%20sense%20of%20security\"\n            target=\"_blank\"\n            rel=\"noreferer noopener\"\n            class=\"wp-component-socials__link\"\n            title=\"Share on Linkedin\"\n        >\n            <svg class='edwp-icon edwp-icon--xlg js-icon ' aria-hidden='true'>\n                <use xlink:href='#linkedin'><\/use>\n            <\/svg>        <\/a>\n    \n            <a\n            href=\"http:\/\/x.com\/share?text=AI cyber defense false sense of security&#038;url=https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/ai-cyber-defense-false-sense-of-security\/\"\n            target=\"_blank\"\n            rel=\"noreferer noopener\"\n            class=\"wp-component-socials__link wp-component-socials__link--twitter\"\n            title=\"Share on Twitter\"\n        >\n            <svg class='edwp-icon edwp-icon--xlg js-icon ' aria-hidden='true'>\n                <use xlink:href='#x'><\/use>\n            <\/svg>        <\/a>\n    \n    \n    <\/div>\n        <\/div>\n    <\/div>\n<\/section>\n                <\/div>\n                                                <div class=\"wp-block-two-column-block__right\">\n                                <div class=\"wp-component-paragraph wp-block-two-column-block__paragraph \">\n    <p><b><span data-contrast=\"auto\">Quick answer:<\/span><\/b><span data-contrast=\"auto\"> AI is now a stable part of the attacker toolkit, and it helps defenders too, especially with technical work. But AI in cyber defense only improves security when it\u2019s integrated with your data, fits your processes, and is matched by the capacity to act on its findings. Otherwise it creates a false sense of security, and that\u2019s where the gap between organizations opens.<\/span><span data-ccp-props=\"{&quot;335559738&quot;:180,&quot;335559739&quot;:180}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Key takeaways<\/span><\/b><span data-ccp-props=\"{&quot;335559738&quot;:180,&quot;335559739&quot;:180}\">\u00a0<\/span><\/p>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"3\" data-list-defn-props=\"{&quot;335551671&quot;:0,&quot;335552541&quot;:1,&quot;335559685&quot;:480,&quot;335559991&quot;:480,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"11\" data-aria-level=\"1\"><span data-contrast=\"auto\">Attackers have used AI from the start: phishing, malware development, reconnaissance and vulnerability discovery.<\/span><span data-ccp-props=\"{&quot;335559738&quot;:36,&quot;335559739&quot;:36}\">\u00a0<\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"3\" data-list-defn-props=\"{&quot;335551671&quot;:0,&quot;335552541&quot;:1,&quot;335559685&quot;:480,&quot;335559991&quot;:480,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"12\" data-aria-level=\"1\"><span data-contrast=\"auto\">Agentic AI now lets one person plan an attack while AI coordinates and executes it.<\/span><span data-ccp-props=\"{&quot;335559738&quot;:36,&quot;335559739&quot;:36}\">\u00a0<\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"3\" data-list-defn-props=\"{&quot;335551671&quot;:0,&quot;335552541&quot;:1,&quot;335559685&quot;:480,&quot;335559991&quot;:480,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"13\" data-aria-level=\"1\"><span data-contrast=\"auto\">AI makes defenders more capable, especially in malware analysis and code review.<\/span><span data-ccp-props=\"{&quot;335559738&quot;:36,&quot;335559739&quot;:36}\">\u00a0<\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"3\" data-list-defn-props=\"{&quot;335551671&quot;:0,&quot;335552541&quot;:1,&quot;335559685&quot;:480,&quot;335559991&quot;:480,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"14\" data-aria-level=\"1\"><span data-contrast=\"auto\">Finding issues faster is worthless if you can\u2019t fix them faster.<\/span><span data-ccp-props=\"{&quot;335559738&quot;:36,&quot;335559739&quot;:36}\">\u00a0<\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"3\" data-list-defn-props=\"{&quot;335551671&quot;:0,&quot;335552541&quot;:1,&quot;335559685&quot;:480,&quot;335559991&quot;:480,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"15\" data-aria-level=\"1\"><span data-contrast=\"auto\">Three priorities for leaders: track the technology, gain visibility of AI exposure, and update your processes.<\/span><span data-ccp-props=\"{&quot;335559738&quot;:36,&quot;335559739&quot;:36}\">\u00a0<\/span><\/li>\n<\/ul>\n<h2 aria-level=\"2\"><b><span data-contrast=\"none\">Why this conversation matters now<\/span><\/b><span data-ccp-props=\"{&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;335559738&quot;:200,&quot;335559739&quot;:0}\">\u00a0<\/span><\/h2>\n<p><span data-contrast=\"auto\">At Cyber Security Nordic 2026 on October 28, Paolo Palumbo, Vice President for\u00a0<\/span><span data-contrast=\"none\">Agentic Cybersecurity<\/span><span data-contrast=\"auto\">\u00a0at WithSecure, joined a conversation on how AI has made our defenses better and our risks worse. Paolo has more than two decades in cybersecurity. He joined WithSecure in 2005 and built the company\u2019s first AI malware scanner.<\/span><span data-ccp-props=\"{&quot;335559738&quot;:180,&quot;335559739&quot;:180}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">That background shapes the message. We haven\u2019t been blindsided by AI. We\u2019ve tracked it from both sides: as a capability that strengthens our products and services, and as one that threat actors have embraced. This article covers what that means for the security leaders who have to decide what to do next.<\/span><span data-ccp-props=\"{&quot;335559738&quot;:180,&quot;335559739&quot;:180}\">\u00a0<\/span><\/p>\n<h2 aria-level=\"2\"><b><span data-contrast=\"none\">How are attackers using AI today?<\/span><\/b><span data-ccp-props=\"{&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;335559738&quot;:200,&quot;335559739&quot;:0}\">\u00a0<\/span><\/h2>\n<p><span data-contrast=\"auto\">Attackers use AI across the whole attack chain, and they started early. Paolo\u2019s summary: artificial intelligence is a solid and stable part of the attacker\u2019s toolkit.<\/span><span data-ccp-props=\"{&quot;335559738&quot;:180,&quot;335559739&quot;:180}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">While most organizations were experimenting with AI to translate office documents, threat actors were translating phishing campaigns into multiple languages. They\u2019ve used it to help develop malicious implants and back-end infrastructure code. They use it to discover vulnerabilities, research targets and run reconnaissance.<\/span><span data-ccp-props=\"{&quot;335559738&quot;:180,&quot;335559739&quot;:180}\">\u00a0<\/span><\/p>\n<p aria-level=\"3\"><strong>From assistant to actor\u00a0<\/strong><\/p>\n<p><span data-contrast=\"auto\">The bigger shift is agency. As agentic development and agentic AI become more capable across the industry, threat actors move with it.<\/span><span data-ccp-props=\"{&quot;335559738&quot;:180,&quot;335559739&quot;:180}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Paolo pointed to an attack in February on several entities related to the Mexican government. A single human planned a sophisticated attack with AI. AI then coordinated the attack and executed parts of it. The agencies were breached and a significant amount of data was stolen.<\/span><span data-ccp-props=\"{&quot;335559738&quot;:180,&quot;335559739&quot;:180}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">It\u2019s one case among many. As Paolo put it, it would be surprising to learn that a capable threat actor wasn\u2019t using AI this way.<\/span><span data-ccp-props=\"{&quot;335559738&quot;:180,&quot;335559739&quot;:180}\">\u00a0<\/span><\/p>\n<h2 aria-level=\"2\"><b><span data-contrast=\"none\">How does AI help cyber defenders?<\/span><\/b><span data-ccp-props=\"{&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;335559738&quot;:200,&quot;335559739&quot;:0}\">\u00a0<\/span><\/h2>\n<p><span data-contrast=\"auto\">AI helps defenders most with technical tasks that used to need scarce expertise. Paolo called it a very powerful ally.<\/span><span data-ccp-props=\"{&quot;335559738&quot;:180,&quot;335559739&quot;:180}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Take malware analysis. Reverse engineering once required niche knowledge of assembly languages, computer architectures and operating systems. Today you can often ask AI for help and get very good results. Work that needed several experts can be done by one person.<\/span><span data-ccp-props=\"{&quot;335559738&quot;:180,&quot;335559739&quot;:180}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">The same goes for code. Attackers use AI to find vulnerabilities, and defenders can use the same capability to scan their own code base and make their products more secure.<\/span><span data-ccp-props=\"{&quot;335559738&quot;:180,&quot;335559739&quot;:180}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Paolo was careful about the limits: there\u2019s still very much space for humans. AI improves the work of defenders. It doesn\u2019t replace them.<\/span><span data-ccp-props=\"{&quot;335559738&quot;:180,&quot;335559739&quot;:180}\">\u00a0<\/span><\/p>\n<h2 aria-level=\"2\"><b><span data-contrast=\"none\">Why does AI create a false sense of security?<\/span><\/b><span data-ccp-props=\"{&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;335559738&quot;:200,&quot;335559739&quot;:0}\">\u00a0<\/span><\/h2>\n<p><span data-contrast=\"auto\">Because AI is only a technology, and technology only helps when the organization around it is ready. Paolo named three conditions.<\/span><span data-ccp-props=\"{&quot;335559738&quot;:180,&quot;335559739&quot;:180}\">\u00a0<\/span><\/p>\n<ol>\n<li><b><span data-contrast=\"auto\">It\u2019s well integrated.<\/span><\/b><span data-contrast=\"auto\"> AI needs access to the right data for its output to stay accurate.<\/span><span data-ccp-props=\"{&quot;335559738&quot;:36,&quot;335559739&quot;:36}\">\u00a0<\/span><\/li>\n<li><b><span data-contrast=\"auto\">It fits your processes.<\/span><\/b><span data-contrast=\"auto\"> It has to sit inside the wider fabric of your infrastructure and workflows.<\/span><span data-ccp-props=\"{&quot;335559738&quot;:36,&quot;335559739&quot;:36}\">\u00a0<\/span><\/li>\n<li><b><span data-contrast=\"auto\">You can act on what it finds.<\/span><\/b><span data-contrast=\"auto\"> If AI discovers vulnerabilities in code extremely fast, but you lack the development capacity to fix them or review the pull requests AI generates, you haven\u2019t advanced your security. You\u2019ve created a false sense of it.<\/span><span data-ccp-props=\"{&quot;335559738&quot;:36,&quot;335559739&quot;:36}\">\u00a0<\/span><\/li>\n<\/ol>\n<p><span data-contrast=\"auto\">This is the gap. Some organizations are nimble and skilled enough to turn a complex tool into something effective. Others say \u201cI have AI, I\u2019m fine.\u201d Managing AI well isn\u2019t trivial, and attackers don\u2019t wait for anyone to catch up.<\/span><span data-ccp-props=\"{&quot;335559738&quot;:180,&quot;335559739&quot;:180}\">\u00a0<\/span><\/p>\n<h2 aria-level=\"2\"><b><span data-contrast=\"none\">What should CISOs and security leaders do next?<\/span><\/b><span data-ccp-props=\"{&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;335559738&quot;:200,&quot;335559739&quot;:0}\">\u00a0<\/span><\/h2>\n<p><span data-contrast=\"auto\">Paolo\u2019s advice came down to three priorities.<\/span><span data-ccp-props=\"{&quot;335559738&quot;:180,&quot;335559739&quot;:180}\">\u00a0<\/span><\/p>\n<p aria-level=\"3\"><b><span data-contrast=\"none\">1. Track the technology relentlessly<\/span><\/b><span data-ccp-props=\"{&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;335559738&quot;:200,&quot;335559739&quot;:0}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">This may be one of the biggest revolutions we\u2019ve seen. Security leaders and business leaders both need to stay on top of it.<\/span><span data-ccp-props=\"{&quot;335559738&quot;:180,&quot;335559739&quot;:180}\">\u00a0<\/span><\/p>\n<p aria-level=\"3\"><b><span data-contrast=\"none\">2. Gain visibility of AI exposure and drive it down<\/span><\/b><span data-ccp-props=\"{&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;335559738&quot;:200,&quot;335559739&quot;:0}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Know where AI is used in your organization. Treat the exposure it introduces as a risk to tackle aggressively and reduce.<\/span><span data-ccp-props=\"{&quot;335559738&quot;:180,&quot;335559739&quot;:180}\">\u00a0<\/span><\/p>\n<p aria-level=\"3\"><b><span data-contrast=\"none\">3. Bring your processes into the AI age<\/span><\/b><span data-ccp-props=\"{&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;335559738&quot;:200,&quot;335559739&quot;:0}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"auto\">Vulnerability management and incident response are two processes Paolo named. Review them, and make them fit for purpose. A few practical questions:<\/span><span data-ccp-props=\"{&quot;335559738&quot;:180,&quot;335559739&quot;:180}\">\u00a0<\/span><\/p>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"5\" data-list-defn-props=\"{&quot;335551671&quot;:0,&quot;335552541&quot;:1,&quot;335559685&quot;:480,&quot;335559991&quot;:480,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"16\" data-aria-level=\"1\"><span data-contrast=\"auto\">Can we fix vulnerabilities as fast as AI can find them?<\/span><span data-ccp-props=\"{&quot;335559738&quot;:36,&quot;335559739&quot;:36}\">\u00a0<\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"5\" data-list-defn-props=\"{&quot;335551671&quot;:0,&quot;335552541&quot;:1,&quot;335559685&quot;:480,&quot;335559991&quot;:480,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"17\" data-aria-level=\"1\"><span data-contrast=\"auto\">Do we have capacity to review AI-generated fixes?<\/span><span data-ccp-props=\"{&quot;335559738&quot;:36,&quot;335559739&quot;:36}\">\u00a0<\/span><\/li>\n<\/ul>\n<ul>\n<li aria-setsize=\"-1\" data-leveltext=\"\u2022\" data-font=\"\" data-listid=\"5\" data-list-defn-props=\"{&quot;335551671&quot;:0,&quot;335552541&quot;:1,&quot;335559685&quot;:480,&quot;335559991&quot;:480,&quot;469769242&quot;:[8226],&quot;469777803&quot;:&quot;left&quot;,&quot;469777804&quot;:&quot;\u2022&quot;,&quot;469777815&quot;:&quot;multilevel&quot;}\" data-aria-posinset=\"18\" data-aria-level=\"1\"><span data-contrast=\"auto\">Does our incident response still work if an AI tool is unavailable?<\/span><span data-ccp-props=\"{&quot;335559738&quot;:36,&quot;335559739&quot;:36}\">\u00a0<\/span><\/li>\n<\/ul>\n<h2 aria-level=\"2\"><b><span data-contrast=\"none\">Frequently asked questions<\/span><\/b><span data-ccp-props=\"{&quot;134245418&quot;:true,&quot;134245529&quot;:true,&quot;335559738&quot;:200,&quot;335559739&quot;:0}\">\u00a0<\/span><\/h2>\n<p><b><span data-contrast=\"auto\">How are attackers using AI?<\/span><\/b><span data-contrast=\"auto\"> Across the attack chain: translating phishing campaigns, helping write malicious implants and back-end code, finding vulnerabilities, and researching targets. Increasingly they use agentic AI that coordinates and executes parts of an attack.<\/span><span data-ccp-props=\"{&quot;335559738&quot;:180,&quot;335559739&quot;:180}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Does using AI make a company more secure?<\/span><\/b><span data-contrast=\"auto\"> Not on its own. AI must be integrated with your data, fit your processes, and be matched by the capacity to act on its findings. Without that, it can create a false sense of security.<\/span><span data-ccp-props=\"{&quot;335559738&quot;:180,&quot;335559739&quot;:180}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">What is the AI cybersecurity gap?<\/span><\/b><span data-contrast=\"auto\"> It\u2019s the widening distance between organizations that can turn AI into effective defense and those that can\u2019t. Attackers don\u2019t care about the gap, and they already use AI.<\/span><span data-ccp-props=\"{&quot;335559738&quot;:180,&quot;335559739&quot;:180}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">Will AI replace security analysts?<\/span><\/b><span data-contrast=\"auto\"> No.\u202fAI lets one person do work that once needed several experts, such as malware analysis, but there\u2019s still very much space for humans.<\/span><span data-ccp-props=\"{&quot;335559738&quot;:180,&quot;335559739&quot;:180}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"auto\">What should a CISO do first?<\/span><\/b><span data-contrast=\"auto\"> Start with visibility: understand where AI is used in your organization and reduce the exposure it creates. Then review processes such as vulnerability management and incident response.<\/span><\/p>\n<p>&nbsp;<\/p>\n<p><strong>Watch now: Made Our Defences Better and Our Risk Worse<\/strong><\/p>\n<\/div>\n        <div\n        class=\"wp-component-video-embed wp-component-video-embed--ratio-- wp-block-two-column-block__video-embed \"\n            >\n                    <iframe\n                                src=\"https:\/\/www.youtube.com\/embed\/ubmf8_86K6c\"\n                                class=\"wp-component-video-embed__iframe\"\n                title=\"Video\"\n                allow=\"accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share\"\n                allowfullscreen\n            ><\/iframe>\n                        <\/div>\n    <section\n    class=\"wp-block-sharing-icons edwp-block wp-block-sharing-icons--disable-border wp-block-sharing-icons--disable-container wp-block-two-column-block__share wp-block-two-column-block__mobile-after-right wp-block-two-column-block__share wp-block-two-column-block__mobile-after-right\"\n    >\n    <div class=\"wp-block-sharing-icons__container\">\n        <div class=\"wp-block-sharing-icons__inner\">\n                            <p class=\"wp-block-sharing-icons__title fade-in\">\n                    Share this story                <\/p>\n                        <div class=\"wp-component-socials wp-component-socials--dark-mode\">\n    \n            <a\n            href=\"https:\/\/www.linkedin.com\/shareArticle?mini=true&#038;url=https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/ai-cyber-defense-false-sense-of-security\/&#038;title=AI%20cyber%20defense%20false%20sense%20of%20security\"\n            target=\"_blank\"\n            rel=\"noreferer noopener\"\n            class=\"wp-component-socials__link\"\n            title=\"Share on Linkedin\"\n        >\n            <svg class='edwp-icon edwp-icon--xlg js-icon ' aria-hidden='true'>\n                <use xlink:href='#linkedin'><\/use>\n            <\/svg>        <\/a>\n    \n            <a\n            href=\"http:\/\/x.com\/share?text=AI cyber defense false sense of security&#038;url=https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/ai-cyber-defense-false-sense-of-security\/\"\n            target=\"_blank\"\n            rel=\"noreferer noopener\"\n            class=\"wp-component-socials__link wp-component-socials__link--twitter\"\n            title=\"Share on Twitter\"\n        >\n            <svg class='edwp-icon edwp-icon--xlg js-icon ' aria-hidden='true'>\n                <use xlink:href='#x'><\/use>\n            <\/svg>        <\/a>\n    \n    \n    <\/div>\n        <\/div>\n    <\/div>\n<\/section>\n                <\/div>\n                        <\/div>\n<\/section>\n\n\n<section\n    class=\"wp-block-cards edwp-block wp-block-cards--col-3 layout--spacing-xxxl-top layout--spacing-xxxl-bottom\"\n    >\n    <div class=\"wp-block-cards__container\">\n        <div class=\"wp-component-content wp-component-content--default wp-block-cards__content\">\n            <h2 class=\"wp-component-heading text--h2 wp-component-content__title\">\n    Blog <span class=\"blue-text\">post<\/span><\/h2>                    <div class=\"wp-component-content__inner\">\n                                    <div class=\"wp-component-content__content wysiwyg\">\n                        <div class=\"wp-component-paragraph \">\n    <p>Read our latest blogs<\/p>\n<\/div>\n                    <\/div>\n                                                            <\/div>\n                <\/div>                                            <div class=\"wp-block-cards__cards row-load\">\n                    <div class=\"wp-component-card-insight wp-block-cards__card wp-component-card-insight--highlighted\">\n    <div class=\"wp-component-card-insight__image-wrapper\">\n        <img loading=\"lazy\" decoding=\"async\" width=\"1920\" height=\"1080\" src=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1.jpg.webp\" class=\"wp-component-card-insight__image\" alt=\"AI Security hero image with iceberg\" srcset=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1.jpg.webp 1920w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-300x169.jpg.webp 300w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-1024x576.jpg.webp 1024w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-768x432.jpg.webp 768w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-1536x864.jpg.webp 1536w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-447x251.jpg.webp 447w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-700x394.jpg.webp 700w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-260x146.jpg.webp 260w\" sizes=\"auto, (max-width: 1920px) 100vw, 1920px\" \/>                    <p class=\"wp-component-card-insight__content-type\">Blog<\/p>\n            <\/div>\n    <div class=\"wp-component-card-insight__content\">\n                    <div class=\"wp-component-card-insight__meta\">\n                <div class=\"wp-component-card-insight__categories\">\n                                            <span class=\"wp-component-card-insight__category\">AI<\/span>\n                                            <span class=\"wp-component-card-insight__category\">AI Security<\/span>\n                                    <\/div>\n            <\/div>\n                            <h3 class=\"wp-component-card-insight__title\">Agentic AI risk European AI Sovereignty<\/h3>\n                                            <p class=\"wp-component-card-insight__desc\">An AI model breached Hugging Face, then a defensive AI tool refused to help. Why AI sovereignty is now a security question for European organizations.<\/p>\n                            <div class=\"wp-component-card-insight__button-wrapper\">\n                <a class=\"wp-component-button btn btn--primary btn--dark wp-component-card-insight__button btn--small\" href=\"https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/agentic-ai-risk-european-ai-sovereignty\/\">Read more<\/a>            <\/div>\n            <\/div>\n<\/div><div class=\"wp-component-card-insight wp-block-cards__card\">\n    <div class=\"wp-component-card-insight__image-wrapper\">\n        <img loading=\"lazy\" decoding=\"async\" width=\"1920\" height=\"1080\" src=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1.jpg.webp\" class=\"wp-component-card-insight__image\" alt=\"AI Security hero image with iceberg\" srcset=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1.jpg.webp 1920w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-300x169.jpg.webp 300w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-1024x576.jpg.webp 1024w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-768x432.jpg.webp 768w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-1536x864.jpg.webp 1536w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-447x251.jpg.webp 447w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-700x394.jpg.webp 700w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/09\/WS_AI_Security_1920x1080_blog-1-260x146.jpg.webp 260w\" sizes=\"auto, (max-width: 1920px) 100vw, 1920px\" \/>                    <p class=\"wp-component-card-insight__content-type\">Blog<\/p>\n            <\/div>\n    <div class=\"wp-component-card-insight__content\">\n                    <div class=\"wp-component-card-insight__meta\">\n                <div class=\"wp-component-card-insight__categories\">\n                                            <span class=\"wp-component-card-insight__category\">AI<\/span>\n                                            <span class=\"wp-component-card-insight__category\">AI Security<\/span>\n                                    <\/div>\n            <\/div>\n                            <h3 class=\"wp-component-card-insight__title\">AI cyber defense false sense of security<\/h3>\n                                            <p class=\"wp-component-card-insight__desc\">Attackers use AI across the attack chain. Defenders benefit too, but only with the right data, processes and capacity. Three steps for CISOs from WithSecure.<\/p>\n                            <div class=\"wp-component-card-insight__button-wrapper\">\n                <a class=\"wp-component-button btn btn--primary wp-component-card-insight__button btn--small\" href=\"https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/ai-cyber-defense-false-sense-of-security\/\">Read more<\/a>            <\/div>\n            <\/div>\n<\/div><div class=\"wp-component-card-insight wp-block-cards__card\">\n    <div class=\"wp-component-card-insight__image-wrapper\">\n        <img loading=\"lazy\" decoding=\"async\" width=\"2560\" height=\"1707\" src=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/11\/WithSecure-verticals-scaled.jpg.webp\" class=\"wp-component-card-insight__image\" alt=\"\" srcset=\"https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/11\/WithSecure-verticals-scaled.jpg.webp 2560w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/11\/WithSecure-verticals-300x200.jpg.webp 300w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/11\/WithSecure-verticals-1024x683.jpg.webp 1024w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/11\/WithSecure-verticals-768x512.jpg.webp 768w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/11\/WithSecure-verticals-1536x1024.jpg.webp 1536w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/11\/WithSecure-verticals-2048x1365.jpg.webp 2048w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/11\/WithSecure-verticals-447x298.jpg.webp 447w, https:\/\/www.withsecure.com\/wp-content\/smush-webp\/2026\/11\/WithSecure-verticals-219x146.jpg.webp 219w\" sizes=\"auto, (max-width: 2560px) 100vw, 2560px\" \/>                    <p class=\"wp-component-card-insight__content-type\">Blog<\/p>\n            <\/div>\n    <div class=\"wp-component-card-insight__content\">\n                    <div class=\"wp-component-card-insight__meta\">\n                <div class=\"wp-component-card-insight__categories\">\n                                            <span class=\"wp-component-card-insight__category\">Mid-market<\/span>\n                                            <span class=\"wp-component-card-insight__category\">Network Security<\/span>\n                                    <\/div>\n            <\/div>\n                            <h3 class=\"wp-component-card-insight__title\">IoT Security Why Connected Devices Need Protection Now<\/h3>\n                                            <p class=\"wp-component-card-insight__desc\">IoT security protects connected devices from attack. Learn why they are exposed, how attackers exploit them, and eight practical steps to secure yours today.<\/p>\n                            <div class=\"wp-component-card-insight__button-wrapper\">\n                <a class=\"wp-component-button btn btn--primary wp-component-card-insight__button btn--small\" href=\"https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/iot-security-why-connected-devices-need-protection-now\/\">Read more<\/a>            <\/div>\n            <\/div>\n<\/div>                <\/div>\n                                                <\/div>\n<\/section>\n","protected":false},"excerpt":{"rendered":"<p>Attackers use AI across the attack chain. Defenders benefit too, but only with the right data, processes and capacity. Three steps for CISOs from WithSecure.<\/p>\n","protected":false},"author":20,"featured_media":13826,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[428,273],"tags":[],"content_type":[],"class_list":["post-14356","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai","category-ai-security"],"acf":[],"card":"<div class=\"wp-component-card-insight js-card-link wp-component-card-insight--highlighted\">\n    <div class=\"wp-component-card-insight__image-wrapper\">\n        <img width=\"1920\" height=\"1080\" src=\"https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/09\/WS_AI_Security_1920x1080_blog-1.jpg\" class=\"wp-component-card-insight__image\" alt=\"AI Security hero image with iceberg\" decoding=\"async\" loading=\"lazy\" srcset=\"https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/09\/WS_AI_Security_1920x1080_blog-1.jpg 1920w, https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/09\/WS_AI_Security_1920x1080_blog-1-300x169.jpg 300w, https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/09\/WS_AI_Security_1920x1080_blog-1-1024x576.jpg 1024w, https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/09\/WS_AI_Security_1920x1080_blog-1-768x432.jpg 768w, https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/09\/WS_AI_Security_1920x1080_blog-1-1536x864.jpg 1536w, https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/09\/WS_AI_Security_1920x1080_blog-1-447x251.jpg 447w, https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/09\/WS_AI_Security_1920x1080_blog-1-700x394.jpg 700w, https:\/\/www.withsecure.com\/wp-content\/uploads\/2026\/09\/WS_AI_Security_1920x1080_blog-1-260x146.jpg 260w\" sizes=\"auto, (max-width: 1920px) 100vw, 1920px\" \/>                    <p class=\"wp-component-card-insight__content-type\">Blog<\/p>\n            <\/div>\n    <div class=\"wp-component-card-insight__content\">\n                    <div class=\"wp-component-card-insight__meta\">\n                <div class=\"wp-component-card-insight__categories\">\n                                            <span class=\"wp-component-card-insight__category\">AI<\/span>\n                                            <span class=\"wp-component-card-insight__category\">AI Security<\/span>\n                                    <\/div>\n            <\/div>\n                            <h3 class=\"wp-component-card-insight__title\">AI cyber defense false sense of security<\/h3>\n                                            <p class=\"wp-component-card-insight__desc\">Attackers use AI across the attack chain. Defenders benefit too, but only with the right data, processes and capacity. Three steps for CISOs from WithSecure.<\/p>\n                            <div class=\"wp-component-card-insight__button-wrapper\">\n                <a class=\"wp-component-button btn btn--primary btn--dark wp-component-card-insight__button btn--small\" href=\"https:\/\/www.withsecure.com\/en\/resources-hub\/blog\/ai-cyber-defense-false-sense-of-security\/\">Read more<\/a>            <\/div>\n            <\/div>\n<\/div>","_links":{"self":[{"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/posts\/14356","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/users\/20"}],"replies":[{"embeddable":true,"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/comments?post=14356"}],"version-history":[{"count":7,"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/posts\/14356\/revisions"}],"predecessor-version":[{"id":14363,"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/posts\/14356\/revisions\/14363"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/media\/13826"}],"wp:attachment":[{"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/media?parent=14356"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/categories?post=14356"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/tags?post=14356"},{"taxonomy":"content_type","embeddable":true,"href":"https:\/\/www.withsecure.com\/en\/wp-json\/wp\/v2\/content_type?post=14356"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}