As organizations continue to grapple with the escalating threat landscape, a growing number of chief information security officers (CISOs) are pouring more money into artificial intelligence (AI) without waiting for clear evidence of its value in cybersecurity. According to a recent survey by IANS and Artico, 69% of CISOs identified AI as their single biggest priority for net new budget dollars in 2026.
The survey found that despite a stagnant median security budget, organizations are allocating significant funds towards AI, with 24% giving it its own separate security budget line. Many experts attribute this trend to the fear factor, where executives and CISOs feel pressure to keep pace with competitors who are rapidly adopting AI for cybersecurity. As Nick Kakolowski, senior research director at IANS, notes, “Executive teams are afraid of falling behind on AI and putting pressure on functional leaders to embrace the technology.”
The increased investments in AI come as the threat landscape continues to evolve, with attackers increasingly using AI to automate and accelerate their operations. This has created a sense of urgency among security leaders, who feel compelled to invest in AI despite uncertainty over its value in cybersecurity. Sean Murphy, field CISO at F5, notes that the rush to invest in AI is not about chasing speculative returns, but rather stems from the growing threat of AI-enabled attacks.
However, research suggests that many organizations are pursuing AI use cases that may not deliver the strongest returns. A recent Gartner survey found a disconnect between the most widely pursued AI use cases and those generating the highest positive returns. For instance, while C-suite leaders identified cybersecurity threat detection and response as the most frequently pursued AI use case, the one delivering the most value was the use of AI for intelligent IT asset and cost optimization.
Experts warn that security leaders are often falling into the trap of prioritizing “popular” or heavily hyped AI applications over those that generate tangible value. As Ram Varadarajan, CEO at Acalvio, notes, “Functional leaders are frequently falling into the trap of prioritizing ‘AI-powered’ security as blame insurance, not a validated bet.” This highlights the need for organizations to carefully evaluate their AI investments and prioritize use cases that deliver clear business value.
In conclusion, while the surge in AI spending is driven by fear and a desire to stay ahead of competitors, it’s essential for security leaders to take a step back and critically assess the value proposition of AI in cybersecurity. By prioritizing evidence-based procurement over peer-following procurement, organizations can ensure that their investments in AI deliver tangible returns and enhance their overall cybersecurity posture.
Source: Dark Reading — 2026-09-16