Companies turn to AI to counter surge in sophisticated cyberattacks

The accelerating threat landscape

Companies worldwide are currently facing a wave of cyber threats that executives say are becoming more sophisticated due to artificial intelligence. This shift is creating a high-stakes game of cat and mouse where hackers can move to new targets before companies can finish rolling out security fixes. The speed of these attacks is straining IT departments, forcing staff to work overnight to patch vulnerabilities.

The consequences of these breaches are becoming increasingly tangible for large retailers and infrastructure providers. For example, a recent cyberattack on European supermarkets caused hackers to raise refrigerator temperatures, leading to millions of dollars in spoiled food. These events are happening with a frequency that was previously uncommon, with some major incidents occurring every few days.

The scale of the problem is reflected in the data provided by the Common Vulnerabilities and Exposures list, which tracks disclosed security flaws. This international registry reported nearly 37,000 security flaws in software or computer systems during the third quarter of 2026. This figure represents a tripling of the number of reported flaws compared to the previous year.

How AI is speeding up exploits

Artificial intelligence is significantly lowering the barrier for hackers to discover and exploit weaknesses in software. Researchers have demonstrated that AI tools can be used to recreate flaws in refrigeration controllers in as little as 28 minutes for less than $7. This ability to rapidly reproduce vulnerabilities puts immense pressure on companies to patch their systems the moment a flaw is identified.

The impact of AI-discovered bugs can be seen in the way they propagate across the internet almost instantly. When two AI-discovered flaws in the PHP programming language were disclosed in October, internet infrastructure firm Cloudflare reported that exploit attempts jumped from thousands to millions within hours. This rapid escalation forced many governments and companies to take websites offline as a precaution to prevent widespread damage.

Because AI can scan for vulnerabilities at a scale and speed that humans cannot match, the window for defense is shrinking. Security experts note that the threat is growing because the tools available to attackers are becoming more accessible and efficient. This creates a reality where software must be secured almost as quickly as it is written or updated.

The rise of AI-powered defenses

To counter these automated threats, many organizations are turning to AI-powered security tools to manage the heavy workload. German web hosting company Ionos, which serves seven million customers, deployed AI-based monitoring systems to scan for threats around the clock. The company shifted to these tools because a standard nine-to-five office hours team is no longer sufficient to handle the volume of modern attacks.

Major corporations are also dedicating significant resources to building and testing defensive AI models. Binance, which suffered a $6.3 billion cryptocurrency theft, announced plans to increase investment in AI-enhanced detection systems. Similarly, the Port of Rotterdam is developing an AI-powered "cyber shield," and Siemens is testing advanced AI models specifically for defensive security purposes.

Retailers are also finding that AI can be a helpful tool for recovery and detection in the wake of an incident. The Dutch-based grocer Ahold Delhaize noted that AI helps them detect and restore systems much faster than they were able to do in the past. This dual-use of AI—as both a weapon for hackers and a shield for defenders—is becoming a standard reality for the industry.

Economic impact and future outlook

The shift toward AI-driven security is creating a massive growth opportunity for the cybersecurity industry. McKinsey projects that the global market for cybersecurity products and services sold by outside vendors will grow from $223 billion in 2025 to $346 billion by 2029. This growth reflects the urgent need for companies to protect their data and infrastructure from increasingly capable adversaries.

The financial stakes for businesses are already high, as seen in the case of Ahold Delhaize. A cyberattack in mid-October led to more than €200 million in sales losses and forced the company to issue a profit warning. These types of losses highlight why executives across various sectors, from building materials to travel platforms, are prioritizing security spending.

Moving forward, the race between attackers and defenders is expected to intensify as both sides become more heavily equipped with AI. Industry leaders suggest that the situation is evolving into a permanent state of high-tech competition. As AI continues to evolve, the ability to stay ahead of automated threats will be a primary factor in a company's ability to operate safely online.