AI, Automation and Attacks: Unpacking the Unit 42 2026 Global Incident Response Report

Unit 42’s 2026 Global Incident Response Report indicates that while AI is increasingly being used by attackers to speed up attacks and streamline operations – like malware development and command-and-control – the fundamental attack methods remain largely unchanged. Threat actors are leveraging AI to enhance existing techniques, such as token jacking and agentic ransomware, but haven’t yet introduced entirely new attack vectors. The report emphasizes that AI is a force multiplier for both attackers and defenders, and that a strong foundation in cybersecurity principles remains crucial, particularly as AI continues to evolve and become more integrated into the threat landscape.