Zscaler Predicts AI-Driven Attacks, Data Extortion and Supply-Chain Risks in 2026
Summary
Zscaler forecasts that AI-powered attacks, insecure AI-generated code, data-only ransomware extortion, risks to connected infrastructure, and supply-chain compromise will shape the 2026 threat landscape, alongside greater use of AI defense and security consolidation.
Key points
- Zscaler predicts threat actors will use generative AI to scale phishing, deepfake voice scams, malware development, and data analysis for extortion.
- The company expects autonomous AI agents to play a larger role in identifying threats and taking defensive action.
- AI-generated code and ungoverned “Shadow AI” applications may introduce vulnerabilities or compromised packages into organizations.
- Zscaler says ransomware groups are increasingly relying on data theft and leak threats rather than encryption; it cites a 92.7% rise in data exfiltrated by top ransomware families in 2025.
- The article anticipates greater ransomware risk to IoT, operational technology, and 5G-connected environments, including critical sectors.
- Software, infrastructure, and AI supply chains are identified as potential routes to compromise multiple organizations; leaked ransomware tools may enable copycat attacks.
- Zscaler predicts enterprises will consolidate security tools and extend Zero Trust controls across environments and devices.
Article Details
- Topic
- Zscaler's predictions for the 2026 threat landscape, covering AI-powered attacks and defense, AI application risks, ransomware extortion, IoT/OT/5G threats, software supply-chain compromise, and security consolidation.
Threat Actors
Vendors
Industries
Healthcareand 5G networks. We anticipate a surge in ransomware targeting critical sectors like manufacturing and healthcare by exploiting interdependencies between these systems. Without a Zero Trust model that extends to everyManufacturingTechnology (OT), and 5G networks. We anticipate a surge in ransomware targeting critical sectors like manufacturing and healthcare by exploiting interdependencies between these systems. Without a Zero Trust model that