The rapid evolution of artificial intelligence tools is exacerbating the threat to cybersecurity, with AI-driven attacks surging 56% year-over-year, according to IBM's 2026 Cost of a Data Breach Report. This has resulted in one in four organisations falling victim to an AI-powered breach. The situation is further complicated by the fact that 46% of security alerts are false positives, while 42% are never investigated at all, as revealed by the Microsoft State of the SOC 2026 study.
Local cybersecurity teams are struggling to cope with the mounting threat, with 59% of teams suffering from critical skills shortages, a 15% jump from the previous year, according to the 2025 ISC2 Cybersecurity Workforce Study. The situation is dire, with security teams suffocating under a mountain of irrelevant data while trying to isolate and respond to genuine attacks. Allan Juma, Lead Cybersecurity Engineer at ESET, notes that security teams are not failing because they are blind to incoming threats, but rather due to the overwhelming volume of data.
The threat vector itself is undergoing a fundamental transformation, driven by the emergence of agentic AI tools. These tools can interact with the external world, browsing the live internet, connecting with digital products, executing independent purchases, and even transacting directly with bank accounts if granted permission. This shift towards agentic AI has significant implications for cybersecurity, as the requirement for human involvement in orchestrating cyberattacks is shrinking dramatically.
The impact of AI-driven attacks on South African organisations is significant, with many struggling to keep pace with the rapidly evolving threat landscape. The country's cybersecurity teams are facing an unprecedented surge in automated cyber threats, with AI-powered attacks becoming increasingly sophisticated. As a result, local organisations are being forced to re-evaluate their cybersecurity strategies and invest in new technologies and skills to combat the threat.
Experts warn that the situation is likely to worsen unless urgent action is taken to address the cybersecurity skills shortage and develop more effective strategies for combating AI-driven attacks. The use of AI-powered tools is becoming increasingly prevalent, and it is essential that cybersecurity teams are equipped with the skills and technologies needed to counter this threat. This may involve investing in new technologies, such as AI-powered security solutions, and developing more effective incident response strategies.
The role of AI in cybersecurity is complex and multifaceted, with AI-powered tools being used by both attackers and defenders. While AI-driven attacks pose a significant threat, AI-powered security solutions also offer a range of benefits, including improved incident response and enhanced threat detection. As the threat landscape continues to evolve, it is essential that local organisations stay ahead of the curve and develop effective strategies for leveraging AI in cybersecurity.
In conclusion, the threat posed by AI-driven cyber attacks is significant and growing, with local cybersecurity teams facing an unprecedented surge in automated cyber threats. To combat this threat, it is essential that organisations invest in new technologies and skills, and develop more effective strategies for combating AI-driven attacks. This will require a coordinated effort from government, industry, and individuals to address the cybersecurity skills shortage and develop more effective incident response strategies.
Key points
- AI-driven attacks have surged 56% year-over-year, with one in four organisations falling victim to an AI-powered breach.
- 59% of local cybersecurity teams suffer from critical skills shortages, a 15% jump from the previous year.
- Agentic AI tools can interact with the external world, executing independent purchases and transacting directly with bank accounts if granted permission.
