AI and Quantum Computing Reshape Cybersecurity Landscape, Demanding Zero Trust Approach

AI and quantum technologies are fundamentally changing cybersecurity, reshaping the speed and scale at which both attackers and defenders operate. The weaponization of AI in cyberattacks is already challenging existing defenses. Cybercriminals are leveraging AI to automate attacks faster than ever, including using generative AI for large-scale social engineering and voice cloning to bypass security measures. Agentic AI further escalates the threat by introducing autonomous systems capable of reasoning and adapting like human adversaries. Quantum computing poses a different but equally significant risk. Its potential to break current encryption standards, particularly public-key systems like RSA and Elliptic Curve, could undermine secure online communication, digital signatures, and cryptocurrency. Peter Bailey, senior vice president and general manager of Cisco’s security business, emphasizes the urgency: “We know quantum is coming. Once it does, it will force a change in how we secure data across everything, including governments, telecoms, and financial systems.” Bailey also notes the importance of addressing both threats simultaneously: “Most organizations are understandably focused on the immediacy of AI threats. Quantum might sound like science fiction, but those scenarios are coming faster than many realize. It’s critical to start investing now in defenses that can withstand both AI and quantum attacks.” A critical component of this defense is a zero trust approach to cybersecurity, which assumes no user or device can be inherently trusted. This approach enforces continuous verification, enabling constant monitoring and quick responses to potential vulnerabilities. It provides a resilient framework that adapts to the evolving threat landscape. Nearly three-quarters (74%) of cybersecurity professionals report that AI-enabled threats are already significantly impacting their organizations, with 90% anticipating such threats within the next two years. According to Bailey, keeping pace requires using AI to automate threat detection and response. Organizations are also exploring how AI agents can enhance their cybersecurity capabilities. Cisco's 2025 AI Readiness Index indicates that nearly 40% of companies expect agentic AI to augment or assist teams, particularly in cybersecurity. Regarding the quantum threat, almost three-quarters (73%) of US organizations believe it is only a matter of time before cybercriminals use quantum computing to decrypt and disrupt current cybersecurity protocols. Despite this concern, most (81%) admit they could do more to secure their data. Companies like Apple and Google are already implementing quantum-resistant cryptography. Apple is using PQ3 for iMessage, while Google is testing post-quantum cryptography (PQC) in Chrome. Cisco is also investing in quantum-proofing its software and infrastructure. For organizations beginning to prepare quantum defenses, Bailey recommends establishing visibility by understanding what data they have and where it resides, and planning for migration by assessing what it will take to support post-quantum algorithms across their infrastructure. Ultimately, building resilience against both AI and quantum threats requires a zero trust approach. By embedding zero trust access controls and integrating specific measures like quantum-immune cryptography and AI-powered security tools, organizations can minimize their attack surface and ensure rapid recovery in the event of a breach. “Organizations that invest early will be the ones setting the pace, not scrambling to catch up,” Bailey concludes.