AI is reshaping security
AI is powering both a spike in credential attacks and the next generation of Security Operations Centers that automate threat detection and response for DeFi and enterprise — vendors claim faster triage and fewer false positives. Firms now treat AI as a third‑party risk, and vendors warn governance gaps must be closed as SOCs are rearchitected. (govinfosecurity.com) (siliconangle.com)
Security teams report AI-enabled password attacks at internet scale, with Microsoft estimating "more than 7,000 password attacks per second" during RSAC coverage. (siliconangle.com) Dashlane CEO John Bennett called for a shift to proactive credential security as AI is being used to automate phishing and credential-stuffing campaigns, according to coverage of industry interviews. (govinfosecurity.com) The Resolv DeFi incident on March 22, 2026 showed a compromised off‑chain privileged key enabled minting that produced roughly $23 million in extracted value and an ~80% token price collapse, highlighting how credential/off‑chain compromises translate into immediate on‑chain losses. (chainalysis.com) DeFi security providers are pushing AI-first SOC tooling: Forta advertises a Forta Firewall that "integrates with protocols and rollups to prevent over 99% of hacks" and positions on‑chain detection as a pre‑execution defense. (forta.org) Forta has also publicized ecosystem partnerships—Mode and Forta work together to secure emerging on‑chain agent economies—embedding AI detection into DeFi stacks to block malicious transactions before execution. (forta.org) Microsoft unveiled Agent 365 and AI enhancements that it says are backed by "more than 100 trillion daily signals," protect 1.6 million customers and one billion identities, and will be generally available May 1 to help scale automated triage and response. (microsoft.com) Sentinel updates and AI playbook generators debuted at RSAC aim to reduce manual remediation time by automating workflows and natural‑language playbook creation, while Cisco and other vendors pushed agent‑centric controls to harden agents before deployment. (4sysops.com) Multiple industry analyses and surveys at RSAC and in consulting reports flag AI as a new third‑party risk vector and say governance and vendor oversight remain immature, with vendors and auditors urging rapid closure of discovery, identity, and monitoring gaps. (techrepublic.com)
