Narrative Goldmine

Cybersecurity

4 min read

Properties

Type
  • Class
Resource
  • urn:ngm:class:cybersecurity
Domain
  • security
Status
  • stable
Maturity
  • emerging
Quality
  • 0.68
Is a
Has part
Requires
Enables
Generated
  • by: process:vault-migrate/1.0 · at: 2026-09-22T12:41:39.024503178Z
Bridges to
Contrasts with
Depends on
Legacy term id
  • AI-9505
Links
Page resource
  • urn:visionflow:page:9244dd4e7632e6d3c2660dfac1f35dc61d05f467ca5170cd86dbc09b72b73914
Related to
Standardized by
Uses

Cybersecurity is the discipline concerned with protecting computer systems, networks, and data from unauthorised access, damage, and attack. In the AI governance context it addresses adversarial threats to machine learning models, data poisoning, model extraction, and the use of AI techniques for automated threat detection, vulnerability analysis, and intrusion detection. It overlaps strongly with privacy, encryption, access control, and authentication.

Semantic Classification

Content

Overview

Cybersecurity protects digital assets — systems, networks, data, and AI models — from adversarial actors. The field encompasses preventive controls (encryption, access control, authentication), detective controls (anomaly detection, intrusion detection systems), and responsive measures (incident response, vulnerability patching). AI introduces both new attack surfaces (adversarial attacks on models, data poisoning, model inversion) and new defences (AI-driven threat intelligence, automated vulnerability scanning). Privacy and data protection are tightly coupled concerns, governed by frameworks such as ISO 27001 and sector-specific regulations. In spatial and metaverse contexts, cybersecurity extends to securing XR hardware, protecting user biometric data, and ensuring integrity of shared virtual environments.

Current Landscape (2026)

  • AI has become the dominant force reshaping the field: the World Economic Forum’s Global Cybersecurity Outlook 2026 found 94% of respondents view AI as the most significant driver of change, and 87% named AI-related vulnerabilities the fastest-growing cyber risk of 2025, with genAI data leaks (34%) and adversarial-capability advances (29%) the leading 2026 concerns.
  • Agentic AI has emerged as the next major attack surface: autonomous agents now automate reconnaissance, payload delivery and privilege escalation, prompting frameworks such as the OWASP Agentic AI Security and Governance guidance, the OWASP AI Vulnerability Scoring System (AIVSS) and CSA’s Agentic AI Red Teaming methodology, while “shadow AI” and risky enterprise prompts have become mainstream defensive concerns.
  • Post-quantum cryptography moved from theory to mandated rollout: following NIST’s August 2024 finalisation of FIPS 203 (ML-KEM), 204 (ML-DSA) and 205 (SLH-DSA), the NSA’s updated CNSA 2.0 guidance requires networking equipment (VPNs, routers) to support quantum-resistant algorithms by 2026, sets a 1 January 2027 procurement gate for National Security Systems, and targets full migration by 2035, driving “harvest now, decrypt later” defensive urgency.
  • Ransomware intensified and fragmented: Check Point’s Cyber Security Report 2026 recorded a 48% year-on-year rise in extorted victims and a 50% increase in new ransomware-as-a-service groups, while Aon reported a roughly 95% jump in average ransom payments during 2025, with multi-extortion tactics and critical-infrastructure targeting (healthcare, manufacturing, energy) now standard.
  • Regulation shifted decisively toward accountability: the EU AI Act and US state transparency laws (e.g. California) now demand auditability of AI-agent decisions, the UN Convention against Cybercrime was adopted by the General Assembly in December 2024, and US Executive Order 14144 (January 2025) reinforced PQC and TLS 1.3 timelines, making cyber risk a board-level obligation.
  • Structural pressure grew from reduced public-sector support and rising attack volume: the termination of the MS-ISAC cooperative agreement left US state, local, tribal and territorial entities more exposed, while organisations faced an average of roughly 1,968 attack attempts per week in 2025 and infostealer/credential-harvesting malware surged.
  • Frontier challenges for 2026 centre on treating AI systems as insider threats, governing autonomous agents before the first high-profile agent-caused breach, closing identity-governance and supply-chain gaps, and executing genuine post-quantum migration rather than publishing policy alone.

References

Provenance

Graph View

Backlinks