AI will continue to be cybersecurity’s double-edged sword
· Posted on: January 28th 2026 · read
Insight written by Ben Hobby, Principal, Brian Nichols, Principal, Bernard Regan, Principal and Christopher J. Tait, Principal From Baker Tilly US
AI will continue to be cybersecurity’s double-edged sword AI has become the defining paradox of modern cybersecurity. On one hand, organizations are rapidly adopting AI-powered tools to detect threats faster, identify anomalies in massive data sets and automate responses that once took hours or days to execute. On the other hand, the very same technology is being weaponized by attackers, giving rise to a new wave of cyber threats that are faster, smarter and increasingly difficult to defend against.
The most concerning developments involve social engineering. In 2026, expect to see at least one major breach tied to AI-driven deepfakes or impersonation attacks. Cyber criminals are already using synthetic voices and hyper-realistic videos to fool employees into transferring funds, approving fraudulent requests or disclosing sensitive information.
Every new AI model release expands these capabilities, lowering the barrier to entry for cyber-attackers and amplifying their ability to operate at scale. Meanwhile, defenders are racing to keep pace. Security teams are deploying AI to filter out malicious traffic, detect unusual behaviour in real time and strengthen identity verification. But even these advancements carry risk. Feeding sensitive data into AI systems without proper guardrails can expose organizations to new vulnerabilities.
In short, AI is both the sword and the shield, and mishandling it can cut both ways. The lesson is clear: organizations must treat AI as both an ally and a risk. It is no longer enough to invest in AI-driven defences without also planning for AI-driven attacks. Strong governance, regular red-team testing and employee education around emerging impersonation threats are now table stakes. 2026 will test whether enterprises can strike the right balance, leveraging AI for protection without underestimating the ways adversaries will turn the same technology against them.
The information provided here is of a general nature and is not intended to address the specific circumstances of any individual or entity. In specific circumstances, the services of a professional should be sought. © 2025 Baker Tilly Advisory Group, LP.
Predictions 2026 e-book
MHA Predictions 2026
Download our e-book now
