New research by Hornetsecurity highlights the AI cybersecurity gaps affecting UK businesses. Although almost half (45%) of businesses have been victims of cyberattacks, 26% are still not using AI to strengthen their cybersecurity defenses.
The survey, which gathered responses from more than 500 senior professionals across the UK, reveals that cyber threats are a growing concern. 85% of respondents recognize the increasing sophistication of these attacks, largely attributed to AI making the threat creation process easier.
Commenting on the results, Daniel Hofmann, CEO of Hornetsecurity, said: “The findings show just how widespread cybercrime is – and while 74% of businesses are integrating AI into their defenses in a bid to block threats, a quarter of them have yet to use the technology . Businesses must recognize the potential of AI in combating cyber threats and integrate it into their security strategies to stay ahead of increasingly sophisticated attacks.
The double-edged sword of AI
The dual nature of AI in cybersecurity continues to concern professionals across industries: 40% of respondents view AI as a mitigator and exacerbator of cyber threats. When it comes to personal experience, the direct divide repeated itself again: 45% of business leaders found AI had helped them, and another 45% said AI had made the landscape worse threats.
This comes as threat actors increasingly use AI to automate, perfect (and sometimes translate) malicious attacks on a global scale. The UK’s National Cyber Security Center (NCSC) found that AI lowers the barriers to entry for entry-level cybercriminals.
Phishing attacks and deep fakes
There is significant concern about AI-based phishing attacks, with 58% of respondents identifying it as their top concern. Deepfake technology also emerges as a major concern, with 39% of businesses concerned about its potential – and growing – use in cyberattacks.
Despite the challenges, AI plays a crucial role in strengthening cybersecurity efforts. More than half of companies (52%) use AI to improve threat detection, and 19% implement it for cybersecurity training. However, more than a quarter (26%) of businesses have yet to adopt AI into their cybersecurity strategies, highlighting a gap in the use of advanced technologies to detect and combat threats.
Investment in AI and the looming threat of zero-day attacks
There is a stark split in priorities when it comes to investing in AI for cybersecurity: 42% of respondents put it at the top of their agenda, compared to 29% who consider it a lower priority, if at all. This divide highlights the varying levels of awareness and readiness among companies to integrate AI into their cybersecurity frameworks.
Alarmingly, only 19% of businesses feel well prepared for a zero-day attack, and only 8% of them feel fully prepared. There is a disparity in preparedness across sectors. The IT and communications sector has the highest level of confidence, with 38% rating their preparedness at 9 or 10. This is followed by the education, banking and financial services sectors. .
Meanwhile, the government and defense sectors, sports and leisure, and several others report a surprising lack of confidence in their preparedness, highlighting a critical area for improvement. More than one in ten companies are not prepared to deal with a Zero Day attack, a total of 11%.
The future of AI in cybersecurity
Looking ahead, 74% of respondents believe the role of AI in cybersecurity will only become more important over the next five years. This response points to a future in which integrating AI into enterprise cybersecurity strategies is not just an option but a necessity.
Hofmann adds: “For businesses, the message is clear: adopting AI in cybersecurity is essential. Companies must not only invest in new technologies, but also strengthen all technical and human defenses against a frightening and ever-changing threat landscape.
