Cybersecurity experts warn of AI-driven industry crisis

The cybersecurity industry is facing a period of unprecedented instability as the rapid adoption of artificial intelligence by threat actors overwhelms traditional defensive measures. Experts describe the current landscape as a dark age for security professionals, noting that the speed and automation of modern attacks have outpaced established protection frameworks.

Alex Stamos, chief security officer at Cognition and a lecturer at the Stanford University Cyber Policy Center, stated that the multibillion-dollar cybersecurity industry is effectively overdue for a transformation due to the unrelenting waves of AI-boosted breaches. During an interview published by The Verge on Nov. 7, 2026, Stamos highlighted that attackers are now utilizing open-weight models to automate the entire cyber kill chain, enabling them to identify vulnerabilities and generate working exploits simultaneously.

The surge in automated intrusions, which occurred throughout October and into November 2026, has impacted at least 200 firms. Among the notable incidents, a breach at the AI infrastructure provider Fireworks resulted in the theft of access credentials for the developer tool Cursor. This compromise led to approximately 5,000 downstream incidents, illustrating the systemic risks posed to supply chains.

Threat actors, including private criminal crews and state-backed groups from Russia and North Korea, are leveraging tools such as the framework ARTEX and local GLM-5.3 models to conduct these operations. Unlike previous eras that relied on manual exploit development, the current environment is characterized by the use of uncensored, open-weight models that allow for rapid, automated attacks, leaving security teams struggling to manage major bugs in software like PHP and Node.