
Cyber attacks now hit hospitals, power grids, banks and government agencies, and the tools on both sides are changing fast. Here’s a quick look at three trends I’m watching.
1. AI is changing both offense and defense
Security teams use AI to find and patch software flaws faster. Attackers use it to scale phishing, probe for weaknesses and automate parts of intrusions. The open question is where the real risk lies versus the hype.
2. Critical infrastructure is a growing target
Energy, healthcare, finance and government systems are being hit by both criminal groups and state-linked hackers. [Link a recent incident here.]
3. Ransomware is now a pressure campaign
Many groups steal data and threaten to publish it, adding regulatory and reputational pain on top of the outage. Disclosure rules are tightening in the US, EU and elsewhere, which is changing how companies handle incident response.
Where I’d like input: Are you seeing AI-assisted attacks in the wild, or is it still mostly vendor marketing? And has double extortion changed how your org handles incident response?

Leave a Reply