Sophos AI Report: Attackers Operationalizing AI for Speed

Sophos has released its AI Security 2026 Report, revealing that attackers are now using artificial intelligence to dramatically speed up their operations. The report finds that AI is collapsing attack workflows from weeks down to just days. The most immediate impact of AI on cybercrime is this increased speed. We're also seeing a rise in attacks using identity as the primary way to gain initial access. While new attack types aren't appearing yet, AI is being used to accelerate existing methods. Attack timelines are compressing, and AI-assisted social engineering and deepfakes are now operational tools for threat actors. Attackers are incorporating AI into underground markets, recruitment, malware development, and criminal services. Sophos CTO John Peterson notes that while the tools and techniques are familiar, the speed of development, testing, and iteration is significantly different. This means faster cycles and shorter windows for security teams to respond. Defenders face greater pressure to detect and contain activity quickly.