AI-Powered Cyberattacks to Increase in Scale and Sophistication, Evercore Warns

The increasing power of frontier artificial intelligence systems is set to create significant new security challenges, with autonomous AI agents making sophisticated cyberattacks more scalable than ever before, according to an analysis by Evercore. The firm warns that this development temporarily tilts the balance of cyber offense and defense in favor of attackers.

A New Era of Cyberattacks

According to Evercore's analysts, AI removes the human constraint that has historically limited the scale of complex cyberattacks. While a human hacker can only focus on a few targets at once, agentic AI can deploy thousands of semi-independent agents to continuously discover, probe, and exploit vulnerabilities.

This technology can automate tasks that previously required significant human labor, including:

• Identifying targets and uncovering vulnerabilities
• Developing exploits and obtaining credentials
• Moving laterally within a network
• Maintaining persistence and adapting to defender responses

As a result, Evercore anticipates an increase in both the volume and sophistication of attacks as these advanced AI capabilities become more widespread.

Implications for Enterprise Security

Ad

The integration of frontier AI models into corporate environments is expected to expand the digital attack surface, creating more potential entry points for malicious actors. This trend also increases the number of machine and agentic identities that require robust security protocols, beyond traditional human user accounts.

Evercore views cybersecurity as a durable area of enterprise technology spending in light of these escalating threats. The firm noted that the potential scale and speed of AI-driven attacks will necessitate greater investment in defensive technologies.

Market Outlook and Key Players

In this evolving threat landscape, Evercore identifies identity management vendors as particularly well-positioned to benefit. These companies specialize in governing access across a complex web of users, applications, and non-human identities.

The firm highlighted several companies in the identity and broader cybersecurity space that could see increased demand, including Okta (OKTA), Palo Alto Networks (PANW), CyberArk (CYBR), SailPoint (SAIL), and CrowdStrike (CRWD).