The first generation of security automation promised to eliminate repetitive work. Security orchestration, automated playbooks and machine learning-assisted detection all aimed to help analysts process larger volumes of alerts without increasing headcount. For much of the past decade, however, these systems remained firmly under human control. They could enrich alerts, execute predefined workflows and recommend actions, but the final decision almost always rested with a person.

By 2026, that distinction is beginning to disappear. Artificial intelligence has become more than another security tool. Across security operations centres (SOCs), vulnerability management teams and incident response functions, AI systems are increasingly performing tasks that previously required human judgement. Analysts are no longer asking AI to summarise events or explain suspicious behaviour. They are asking it to investigate incidents, prioritise risks, recommend containment strategies and, in carefully controlled circumstances, take action without waiting for human approval.

This does not represent the replacement of cybersecurity professionals. Instead, it marks the transition from automation to autonomy. Rather than defining every individual step within a workflow, security teams increasingly establish objectives, constraints and levels of authority, allowing intelligent systems to determine how best to achieve those outcomes.

For organisations facing expanding attack surfaces and persistent skills shortages, autonomous security has become less of a technological curiosity and more of an operational necessity.

As, a part of this, that means discussing that social engineering is about manipulating people’s emotions and that we must identify the susceptibilities that hackers use to exploit people.

This NINJIO Insights Report dives into the key emotional susceptibilities that make social engineering work and offers concrete steps that your security team can take to equip your workforce to resist cyberattacks.

Download the Guide

When Automation Reached Its Limits

In the first article in this series, we explored how AI transformed software development through vibe coding. This second article examines the corresponding transformation inside the security operations centre, where AI is increasingly becoming an operational participant rather than simply another tool.

Security operations have struggled with scale for years. Enterprise environments generate millions of security events every day. Endpoint detection platforms, cloud security tools, identity providers, firewalls and application monitoring systems continuously produce telemetry that must be analysed, correlated and prioritised. While advances in automation reduced much of the repetitive administrative work, the overall workload continued to increase.

Traditional automation performed well when workflows were predictable. A suspicious email could automatically be quarantined. A malware hash could be blocked across endpoints. Known indicators of compromise could trigger predefined investigations.

The difficulty arose when incidents became more complex. Sophisticated attacks rarely follow linear paths. They involve multiple identities, cloud services, compromised credentials, legitimate administration tools and behaviour that appears benign when viewed in isolation. Understanding these attacks requires context, reasoning and the ability to evaluate competing explanations—tasks that conventional automation struggled to perform effectively.

At the same time, security teams found themselves responsible for increasingly diverse technology estates. Cloud-native applications, SaaS platforms, hybrid infrastructure and AI services introduced new sources of telemetry without reducing existing responsibilities. The result was familiar across the industry: more alerts, more tools and greater operational complexity.

Most security professionals understand that OT threats are real. Far fewer have had the chance to open an OT malware sample, examine how it works, and understand what it means for critical infrastructure defense.

Join Filipi Pires on 3rd July, 2026 for a free one-hour virtual session that introduces attendees to the world of OT malware through one of the most significant industrial cyberattacks ever observed: Industroyer. And, even better, it’s entirely free.

Get a seat at an analysis masterclass

From Copilots to Colleagues

The first wave of generative AI in cybersecurity focused largely on productivity. Security copilots summarised alerts, translated threat intelligence into plain language and generated investigation queries. Analysts remained responsible for interpreting results and determining appropriate responses.

These capabilities proved valuable, but they addressed only part of the problem. Reducing the time required to investigate alerts did little to reduce the number of alerts themselves. By 2026, AI systems increasingly function as autonomous investigators rather than intelligent assistants.

Instead of responding to individual requests, these systems proactively collect evidence, correlate events across multiple security platforms and construct investigative timelines without requiring continuous human direction. An alert relating to suspicious account activity might trigger a chain of autonomous reasoning that examines authentication logs, endpoint telemetry, cloud infrastructure events and historical user behaviour before presenting analysts with a complete assessment.

Now people are mostly asking themselves whether they agree with the AI’s conclusions, not merely if the content is correct. This change has significant implications for the role of the human analyst. Investigation increasingly becomes an exercise in validation rather than manual evidence gathering.

Autonomous Defence in Practice

Autonomous security does not imply unrestricted decision-making, of course. Most organisations continue to reserve the highest-risk actions for human approval. Disconnecting critical infrastructure, revoking privileged access or shutting down production services typically requires explicit authorisation.

However, many lower-risk operational activities are now delegated to intelligent systems. An AI agent may isolate an endpoint exhibiting ransomware behaviour while simultaneously gathering forensic evidence and notifying incident responders. Another may identify exposed cloud storage, verify whether sensitive data is present, apply corrective configuration changes and document the remediation before a security engineer becomes involved.

Similarly, vulnerability management is evolving beyond static prioritisation. Rather than producing extensive lists of vulnerabilities ranked according to generic severity scores, autonomous systems increasingly assess exploitability within the organisation’s own environment. This reflects a broader trend towards AI-assisted contextual prioritisation rather than purely CVSS-driven remediation. They consider asset criticality, available attack paths, existing compensating controls and observed adversary behaviour before recommending remediation priorities.

This contextual reasoning allows security teams to focus their attention where it is likely to have the greatest operational impact. Importantly, autonomy is rarely absolute. Most organisations implement graduated authority models in which AI systems receive increasing levels of operational independence as confidence grows and associated risks decrease.

The Human Role Has Changed, Not Disappeared

Predictions that AI would replace cybersecurity professionals have proven overly simplistic. If anything, autonomous systems have increased demand for experienced practitioners capable of supervising complex security operations. The skills required are changing, however.

Analysts spend less time manually collecting evidence and more time evaluating AI-generated investigations. Incident responders increasingly assess the quality of machine reasoning rather than reconstructing events from raw telemetry. Security architects focus on defining operational boundaries, approval workflows and governance policies that determine when autonomous systems may act independently.

This shift mirrors developments elsewhere within information technology. Database administrators did not disappear when cloud platforms automated infrastructure provisioning. Network engineers remained essential despite the rise of software-defined networking. In each case, professional expertise evolved from manual operation towards system design and governance.

Cybersecurity is following the same trajectory. The profession increasingly values individuals capable of supervising intelligent systems, understanding their limitations and intervening when automated reasoning produces unexpected outcomes.

Trust Becomes a Security Control

Perhaps the greatest challenge associated with autonomous security is not technical capability but organisational trust. Every security operation involves decisions with potential business consequences. Blocking a malicious process is straightforward if it genuinely represents malware. The situation becomes considerably more complicated when the process belongs to a critical production application or when investigation requires disrupting customer-facing services.

For autonomous security to succeed, organisations must establish confidence in machine decision-making. Security professionals increasingly expect AI systems to explain why particular actions were recommended, identify the evidence supporting those conclusions and describe the confidence associated with their reasoning. Explainability has become a practical operational requirement rather than an academic aspiration.

Equally important is governance. Leading organisations define clear policies describing which actions AI systems may perform autonomously, which require human approval and which remain entirely outside automated authority. Comprehensive audit logging ensures that every decision can be reconstructed, reviewed and challenged if necessary.

These governance mechanisms are becoming as important as the underlying AI models themselves. Without trust, autonomy remains theoretical.

The Risks of Autonomous Security

The growing use of AI within defensive operations inevitably creates new attack surfaces. Adversaries are already exploring prompt injection techniques, attempts to manipulate AI reasoning and methods for poisoning the data on which autonomous systems depend. A security platform that automatically investigates incidents may itself become a target for deception.

There are also concerns surrounding over-reliance. Analysts who become accustomed to accepting AI-generated conclusions without sufficient scrutiny risk missing subtle errors or novel attack techniques that fall outside established patterns. Automation bias, already recognised within aviation and healthcare, is becoming an increasingly relevant consideration for cybersecurity operations.

The challenge is not that AI makes mistakes. Human analysts make mistakes as well. Rather, organisations must ensure that autonomous systems fail safely, communicate uncertainty clearly and encourage appropriate human oversight rather than passive acceptance.

Building resilient operational models therefore requires balancing machine efficiency with professional scepticism.

A Different Kind of Security Operations Centre

The modern SOC increasingly resembles a supervisory control environment rather than a room filled with analysts responding manually to every alert.

Routine investigations are initiated automatically. Evidence is collected continuously. Threat intelligence is correlated in real time. Vulnerabilities are prioritised according to organisational context rather than generic scoring models. Human expertise is directed towards strategic judgement, complex investigations and the refinement of security policy.

The challenge facing security leaders is no longer deciding which repetitive tasks should be automated. That question has largely been answered. Instead, they must determine where autonomous systems can safely exercise judgement, how those decisions should be governed and when human intervention remains essential.

In many respects, 2026 represents the point at which cybersecurity ceased viewing AI as another product category and began treating it as an operational participant. The security operations centre has not disappeared. It has acquired a new colleague—one that works continuously, learns rapidly and never tires, but still requires careful supervision. Readers interested in how autonomous investigation systems are being deployed at production scale can explore Microsoft’s published research.

Key Takeaways

• AI systems are increasingly conducting investigations, correlating telemetry and recommending remediation without requiring continuous human direction.

• Cybersecurity professionals remain essential, but their responsibilities are shifting towards governance, validation and oversight rather than routine investigation.

• Successful organisations establish clear authority boundaries, ensuring autonomous systems operate within well-defined risk tolerances.

• Trust, explainability and governance are becoming core security controls as AI assumes greater operational responsibility.

• The future of security operations lies not in replacing human expertise, but in combining human judgement with machine-scale investigation and response.

Further Reading

• Mandiant AI and Security Operations Research, Google Cloud.

• Security Copilot Technical Documentation

• NIST’s Artificial Intelligence Risk Management Framework (AI RMF)

• MITRE ATT&CK Evaluations and Security Operations Research

• Microsoft Security Copilot documentation

• NIST AI Risk Management Framework

• NIST AI RMF Playbook

• “GenAI-Driven Threat Detection with Microsoft Security Copilot”

• STRIDE-AI: A Threat Modelling Framework for Generative AI

Packt Cyber_AI

#14: Prompt Rejection of Prompt Injection

Prompt injection should be treated like SQL injection in the early web era: not a niche issue, but a foundational security problem that must be designed against from the start…

Read more

2 months ago · 2 likes · Austin Miller

Packt Cyber_AI

#20: Secure Vibes Only?

Short on time? Here are the big ideas, so you won’t miss out and can still come back later on to get the details…

Read more

9 days ago · 1 like · 1 comment · Austin Miller