Yaz Bekkar, certified ethical hacker and principal consulting architect, XDR at Barracuda Networks, characterised the shift this way: “By next year, attacks won’t just use AI; the AI will behave like an independent operator, making real-time choices to reach the attack goal. The shift in 2026 will be toward systems that plan steps, learn from defences in real time, and reroute without human steering.”