Full Report
Ivanti research found that security professionals are eight-times more likely to say GenAI is a net positive versus a net negative for cybersecurity
Analysis Summary
# Industry News: Security Pros See Net Positive in GenAI Despite Heightened Attack Risks
## Summary
Security professionals overwhelmingly view Generative AI (GenAI) as a net positive for cybersecurity—eight times more likely to see it as beneficial than detrimental—citing significant productivity improvements. However, this optimism is tempered by the clear recognition that GenAI is simultaneously increasing the severity and sophistication of cyber-attacks, particularly phishing, necessitating evolution in defensive strategies.
## Key Details
- Date: December 3, 2024 (Publication of the report)
- Companies Involved: Ivanti (Publisher of the report)
- Category: Market Analysis / Industry Sentiment Survey
## The Story
Ivanti's *Generative AI and Cybersecurity: Risk and Reward* report reveals a strong prevailing sentiment among security practitioners: GenAI is beneficial for defense. Forty-six percent view it as a net positive, compared to only 6% who see it as a net negative. Security teams anticipate that GenAI will benefit them as much as, or more than, threat actors, and 85% expect significant productivity gains, which is crucial given the estimated 4.8 million global cybersecurity workforce shortage. Despite this embrace, respondents acknowledge the dual-use nature of the technology, with phishing being the attack vector predicted to become drastically more dangerous due to GenAI's ability to heighten volume and sophistication. Employee training remains the primary defense against AI-powered social engineering, although only 32% believe it is "very effective."
## Business Impact
### For the Companies Involved
- **Ivanti:** By commissioning and releasing this comprehensive report, Ivanti solidifies its position as a thought leader driving the conversation around AI integration in security operations, aiding in product marketing and market intelligence gathering.
### For Competitors
- Competitors will measure their own sentiment tracking against these findings. Those with perceived weaker AI integration or solutions may be seen as lagging if they cannot equally demonstrate productivity benefits to security teams.
### For Customers
- Customers can expect security vendors (reliant on these evolving tools) to roll out GenAI-enhanced productivity features. However, they must remain vigilant against increasingly sophisticated attacks, requiring reassessment of current security maturity models, especially around social engineering defenses.
### For the Market
- The market confirms a strong mandate for GenAI adoption within security functions, validating investment trends. It also signals a critical area for immediate focus: closing the gap between GenAI-enabled attacks and current employee training effectiveness.
## Technical Implications
GenAI is directly enabling sophisticated threat activities, notably through the enhanced creation of persuasive phishing content (polishing tone, context, and reducing language errors). On the defense side, security teams are applying GenAI to improve efficiency in monitoring and potentially automating defensive tasks to counter the workforce shortage. The reliance on EDR (54%) and Endpoint Management (51%) suggests investments in these foundational technologies will continue to be necessary to triage AI-generated threats.
## Strategic Analysis
- Market Positioning: The data positions GenAI tools not as an optional upgrade but as a necessary component to bridge the existing analyst deficit, giving an edge to vendors whose solutions integrate AI functionality deeply.
- Competitive Advantage: Security vendors that can successfully market their GenAI tools as delivering significantly higher productivity gains than threat actors can gain market share quickly.
- Challenges: The primary strategic challenge is managing the pace of AI-enabled attack evolution. Defenses rely heavily on training, which respondents themselves doubt is robust enough against advanced AI phishing.
## Industry Reactions
- **Analyst Opinions:** Analysts would likely emphasize the "risk vs. reward" balance, stressing that the productivity gains are essential, but successful defense requires adapting to the new threat baseline GenAI establishes.
- **Expert Commentary:** Ivanti CIO Robert Grazioli’s commentary underscores the need for *new strategies* to counter malicious AI, indicating that incumbent security measures—like traditional training—may soon be insufficient.
- **Market Response:** The high positive sentiment likely encourages accelerated investment in AI-centric security platforms by both security vendors and enterprise budget holders.
## Future Outlook
- **Predictions and Expectations:** We are likely to see a surge in next-generation security solutions focusing on AI-powered content analysis for emails and an elevated focus on continuous, adaptive training platforms that incorporate AI-generated scenarios.
- **What to watch for:** Increased focus on metrics proving the effectiveness of AI detection vs. traditional defenses, and an escalation in funding for products that directly counter AI-enhanced social engineering.
## For Security Professionals
Security professionals must prioritize learning to leverage GenAI tools to maximize personal and team productivity to keep pace with threats. Crucially, they must advocate for—and adopt—advanced defense mechanisms beyond basic awareness training, focusing on technological controls like advanced EDR, behavioral analysis, and real-time email scanning, as phishing is becoming the most acute AI-driven risk.