Cybersecurity firms face mounting strain as AI-enabled attacks surge

Traders Union
All News
Business & Wealth
Companies
AI-enabled attacks strain cybersecurity

Highlights

Palo Alto Networks reported double-digit growth in global digital forensics and incident response demand over the past six weeks due to AI-enabled attacks.
Incident investigations now often require teams of 5–20 people instead of solo consultants, with firms reassigning staff to address rising PHP vulnerability attacks.
Cybersecurity professionals face growing burnout as workloads increase, with operational strain expected to persist for another 12 to 18 months sector-wide.

Rising caseloads stretch incident response teams

As first reported by Axios, consultants and security firms say the current wave of AI-enabled threats is driving a sustained increase in demand for incident response and threat intelligence services. Justin Timothy, a threat intelligence consultant at GuidePoint Security, described the recent period as exceptionally difficult, while Palo Alto Networks said demand for its global digital forensics and incident response work has risen by double digits over the past six weeks.

Companies that respond to breaches say the workload differs from earlier spikes tied to single high-profile attacks because the pressure is continuous rather than episodic. Palo Alto Networks' Troy Bettencourt said investigations that once could be managed by one consultant now often require teams of five to 20 people, and the company is reassigning staff from other projects as it prepares for more attacks linked to PHP vulnerabilities disclosed last week.

Ransomware groups remain a central threat within this broader surge. While AI is contributing to new attack methods, ransomware operators have already disrupted pipelines, hospitals, education software and other essential services for years, and security professionals say newer AI systems are increasing attackers' capabilities faster than defenders can protect exposed parts of the internet.

Burnout risks grow across the cybersecurity sector

Samantha Lewis, head of threat intelligence at Armadin, said her team is fielding a flood of customer requests as companies try to assess whether their systems are exposed to flaws identified with AI assistance in core internet code. She said her staff spends days reviewing hundreds of alleged exploits, many of which do not work, in order to identify the threats that matter.

The heavier workload is pushing firms to rely more on AI and automation to identify weaknesses and accelerate investigations, but that shift is creating fresh tension inside the workforce. Bettencourt said some employees are both exhausted by the caseload and concerned that the same AI tools designed to ease pressure could eventually replace parts of their work.

Even companies with limited direct exposure to the latest PHP-related risks say they are feeling the strain. Ivanti Chief Information Security Officer and Deputy General Counsel Jack Nelson said the recent period has reduced sleep and increased operational pressure, underscoring how widely the current threat environment is affecting the sector as many expect the battle to continue for another 12 to 18 months.

Our earlier article on Cohere’s planned acquisition of AISLE looked at how the company is expanding into enterprise cybersecurity by adding AI-driven software vulnerability detection alongside its merger with Aleph Alpha. We noted that AISLE’s technology has already uncovered hundreds of previously unknown bugs, including vulnerabilities in widely used internet security components, highlighting how AI is accelerating both discovery and remediation in the security ecosystem.

This material may contain third-party opinions, none of the data and information on this webpage constitutes investment advice according to our Disclaimer. While we adhere to strict Editorial Integrity, this post may contain references to products from our partners.