AI Enhances Cybersecurity Defense Amid Evolving Threat Landscape

During the Engage 2026 conference in Paris, Check Point Software's CTO Jonathan Zanger shared insights into the changing dynamics of cybersecurity, driven largely by advancements in AI. Zanger emphasized that 2026 marks a pivotal moment in the security sector, akin to the internet's launch, as AI significantly reshapes both defense strategies and attack methodologies.

The Evolving Role of AI in Cyber Defense

Zanger's perspective on AI's impact is multifaceted. Traditionally, cybersecurity relied on skilled human teams to monitor threats and develop defenses. However, the introduction of AI has allowed Check Point to scale operations more effectively. "AI enables us to operate with heightened efficiency," he noted, enabling the security teams to analyze threats and respond far more rapidly than before.

For instance, Zanger highlighted the effectiveness of Check Point's red teams, which now leverage AI tools to enhance their testing capabilities. These teams are reportedly working twenty times more efficiently, supported by a sophisticated setup where approximately 300 AI instances monitor and test security protocols continuously. This integration not only boosts the overall security posture but also allows for faster adaptation to emerging threats.

The Flip Side of AI: New Threats on the Horizon

However, the rise of AI has not come without complications. Zanger points out that malicious actors have begun to harness these same technologies, leading to more agile and less-expert-driven cyber threats. This trend includes an influx of smaller threat groups that can exploit AI for advanced phishing campaigns and other forms of attacks. "The entry barrier for offensive cybersecurity is lowering," he stated, showcasing a shift in the adversarial landscape.

Security Risks Associated with AI Integration

As companies increasingly deploy AI across their operations, new security challenges arise. Systems traditionally provided predictable outputs, but AI's capacity to process natural language and interpret ambiguity complicates this predictability. This creates a scenario where organizations must navigate a greater attack surface and a plug-in dynamic with security teams desperate to contain these risks while promoting AI's integration.

The tension lies in managing how connected AI systems can potentially expose vulnerabilities. The more integrated AI becomes, the higher the risk of these systems being exploited. It's a delicate balance that organizations must navigate as they adopt these technologies.

The Necessity for Proactive Defenses

The dual-edged nature of AI extends to the techniques used by cybercriminals. They can now execute complex attacks at an unprecedented speed and volume. Thus, Zanger argues that traditional defense strategies focused solely on detection and response must evolve into a forward-thinking prevention framework.

According to him, ensuring that security teams adopt robust collaborative practices is vital in leveling the playing field against increasingly sophisticated adversaries. "While attackers need only one successful breach, defenders have the power of coordination across teams and companies," Zanger explained.

Addressing Vulnerabilities in AI Platforms

Zanger acknowledged the reality that many AI applications still harbor vulnerabilities due to the rapid pace of innovation. He pointed out the critical need to integrate security measures from the outset of any AI project. "Assuming a platform is secure just because it’s from a reputable vendor is a mistake," he warned, suggesting that vigilance is necessary to safeguard against possible exploitation of these emerging technologies.

Advancements in Cybersecurity Solutions

Highlighting significant innovations in contemporary security platforms, Zanger noted three areas where AI is making a pronounced impact. First, AI enhances defense operations by enabling quicker, more effective vulnerability detection and response. Second, as AI applications become more ubiquitous within corporate frameworks, protecting these very applications from becoming attack vectors poses a fundamental challenge. Finally, enterprises must focus on countering the sophisticated, AI-driven cyberattacks that threaten their infrastructures.

To combat these risks, Zanger suggests a targeted approach that combines advanced models capable of detecting zero-day vulnerabilities with systems that simulate ethical hacking techniques. This proactive stance allows organizations to anticipate potential breaches and strengthen defenses ahead of an attack.

Ensuring Transparency and Auditability in AI

For small and medium-sized enterprises, Zanger underscored the importance of AI system transparency. As organizations increasingly rely on AI for decision-making in threat detection and response, the capability to audit these processes becomes paramount. Striking the right balance between automated threat blocking and providing explanations for such actions can be challenging, yet fundamental.

In his conclusion, Zanger expressed that while automated systems should block as many threats as possible without human input, it remains essential for users to understand why certain actions are taken. This human oversight fosters trust and facilitates an ongoing dialogue about security measures.

Víctor Manuel Fernández attended Engage 2026 as a guest of Check Point Software.