PwC: AI Speeds Cyberattacks, but Identity Remains a Key Weakness

Mar 25, 2026 · Original article ↗

Summary

PwC threat intelligence leader Allison Wikoff says AI is accelerating reconnaissance, phishing and malware development, while fully autonomous attacks remain early-stage. She urges organizations to prioritize identity protection and defenses around critical assets.

Key points

Infostealer logs can supply identities to initial access brokers, while AI-generated phishing and impersonation can expand attackers’ options.
AI is accelerating reconnaissance, phishing and malware development, but fully autonomous attack sequences remain early-stage and unreliable, Wikoff says.
Traditional phishing and credential theft remain effective, and some tracked actors have changed their techniques little in nearly a decade.
Organizations should identify the systems, data, identities and relationships with the greatest business or strategic impact, then align defenses to relevant threats.
Wikoff says Russia-based actors are likely to continue combining cyber and influence operations, while China-based actors are assessed to maintain access in telecommunications and other critical infrastructure.

Article Details

Topic: AI-accelerated cyber threats and the importance of identity security

MITRE ATT&CK

T1566 · PhishingThe article describes attackers using convincing phishing campaigns and lures to compromise identities.

People

Allison WikoffPwC's global threat intelligence leader for the Americas; she discusses AI-accelerated attacks, identity compromise, and threat actors' targeting and motivations.

Countries

Chinalikely continue to blend cyber and influence operations against European and transatlantic democracies; China-based threat actors are assessed to sustain persistent access in telecommunications and other critical Russia“We assess Russia-based threat actors will likely continue to blend cyber and influence operations against European and transatlantic democracies; China-based threat actors are assessed to sustain persistent access in

Industries

Critical infrastructurethreat actors are assessed to sustain persistent access in telecommunications and other critical infrastructure; and tighter attribution and regulation will raise the cost of misjudged risk in mergers and Telecommunicationstransatlantic democracies; China-based threat actors are assessed to sustain persistent access in telecommunications and other critical infrastructure; and tighter attribution and regulation will raise the cost of