Are cyberattackers winning? As we head into 2026, there’s still a significant dearth of cybersecurity professionals available to protect critical infrastructure, and AI tools can’t fully replace human expertise. But the picture is more complex if you look closer. Cash out. Richard Bird, Singulr AI CSO, told IT Brew that attackers have at least one major advantage—the AI environment is more favorable to their interests. “The barriers to entry for being a bad guy have dropped substantially,” Bird said. “Whatever I can’t build myself, I can rent, lease, or buy.” AI comes up. HackerOne CEO Kara Sprague sees things slightly differently—that 2025 was a year when attackers won some advantage due to AI-driven code and other technological innovations. Cybersecurity has always been asymmetric on one side or the other, and 2026 is likely to continue to follow this trend. “In this past year, the advantage went to the cyberattackers, largely because they don’t have the same barriers and speed bumps to adoption of AI that many cyber defenders have, such as corporate governance processes and testing,” Sprague said. Using AI only makes things worse, not because the technology allows for more complex attacks but because it makes it easier for attackers to flood the zone. That will continue in the next year, Bird predicted. Keep reading on IT Brew.—EH |