Offensive Security Investments Surge as AI Threats Increase

Research from Omdia, led by Theresa Lanowitz, indicates a growing investment in offensive cybersecurity practices due to the increasing speed and sophistication of AI-driven attacks. Organizations are seeking to expand their use of AI for penetration testing, red teaming, and vulnerability assessments, but with significant concerns about the potential for AI agents to become ‘rogue’ and the associated costs. The research highlights a 99% investment in software supply chain security, but only 44% are building Software Bills of Materials (SBOMs) at the time of build. This creates a significant vulnerability as AI-generated code and third-party software increasingly enter the supply chain. The report emphasizes the need for innovation in software supply chain security and the importance of executive-level involvement in addressing these challenges.