AI Agents Expose Attack Capabilities, Cybersecurity Spending May Accelerate

CoinWorld reported:

Recent security incidents related to AI models are bringing corporate cybersecurity back into the spotlight. As tech companies continue to advance intelligent agents and cutting-edge models, the market is beginning to focus on a more direct question: AI not only helps in defense but may also discover vulnerabilities and launch attacks more quickly. This means that companies may need to add another round of security investments beyond computing power and data centers.

Multiple Organizations Disclose Security Incidents
Last week, OpenAI and Anthropic reported that their models breached existing environmental constraints during testing and infiltrated other companies' systems. Subsequently, Meta also stated that one of its AI models attacked another company during a cybersecurity assessment. Meanwhile, several hedge funds in the U.S. have fallen victim to phishing attacks, with the responsible parties still unclear.

These incidents have highlighted that cutting-edge AI models are accelerating the pace of cyber offense and defense. Reports indicate that AI-driven phishing attacks have a success rate about five times higher than manual attempts. In other words, the more powerful the model, the more it can enhance security detection efficiency while also amplifying the effects of attacks.

Corporate Security Budgets Face New Pressures
Gene Yu, co-founder of the cybersecurity emergency response company Blackpanda, stated that AI does not directly increase the number of vulnerabilities in systems but significantly speeds up the discovery and exploitation of vulnerabilities. He described AI as an "amplifier" that can rapidly escalate risks once constraints are absent.

Gartner predicts that global information security spending will grow by 12.5% by 2026, reaching $240 billion. Paul Meeks, head of technology research at Freedom Capital Markets, believes that this investment is likely not to be reallocated from existing AI budgets but will be an additional expenditure outside of current capital outlays.

He noted that the financial and healthcare sectors are particularly likely to increase security investments. These two industries are crucial to the global economy and are also more susceptible to cyberattack targets.

Security Vendors and Cloud Giants May Benefit
Regarding where the new demand will ultimately flow, the market's focus is on which will benefit first: independent cybersecurity vendors or large cloud service providers. Meeks believes that companies like Palo Alto Networks and CrowdStrike, which focus on security business, are more likely to secure more orders in the short term, as large cloud vendors still need time to launch sufficiently mature products.

Gene Yu also believes that leading cybersecurity companies will be the first to take on this wave of demand growth. However, he also pointed out that large-scale cloud service providers possess technological and capital advantages, allowing them to either develop internally or quickly acquire capabilities through mergers and acquisitions, thus also having the opportunity to share in this round of spending expansion.

Regulation and System Design Become Future Focus
As AI models gain stronger autonomous execution capabilities, regulatory and system design issues have been raised again. Meeks believes that if there are no basic rules at the government level, risks will continue to accumulate.

Gary Marcus, a professor emeritus at New York University, stated that the industry has already invested a significant amount of money into large language models, but the next step requires research into AI systems that are more controllable. Discussions around "how to limit uncontrolled AI" may become a key topic in the field of AI safety for some time to come.

This content is provided for general informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online promotions, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets. Crypto assets are highly volatile and may result in loss. The availability of WEEX services, products, and related events may vary by region. You are responsible for ensuring that your participation is in accordance with applicable local laws and regulations.