Microsoft says traditional cybersecurity can't keep up with AI, and wants to build an entirely new 'Cyber Stack'

[SuperPosition52]

Microsoft Security EVP Hayete Gallot published a post arguing that the fundamental physics of cybersecurity are changing, since autonomous AI systems can now reason, adapt and operate continuously, while the cost of mounting an attack keeps falling even as the volume, speed and complexity of what needs defending keeps growing. Her core argument is that security approaches built around human paced threats simply cannot keep pace with a world of AI agents and machine speed attacks, and that the industry needs an entirely new architecture she calls the Cyber Stack

That new stack, as described, needs to continuously perceive risk across an organization's entire digital footprint, reason across enormous amounts of context rather than working from narrow, siloed signals, and take action at machine speed rather than waiting for a human to review and approve every response. Crucially, Gallot frames this as needing to keep humans central to the mission even while operating at machine speed, meaning the goal isn't replacing security teams but giving them dramatically more powerful tools and clearer insight so they can act faster themselves

This lands the same week as Nvidia's new Open Secure AI Alliance and Bloomberg's reporting on record breaking vulnerability discovery numbers, painting a consistent industry wide picture, major security vendors are converging on the same diagnosis that the old model of periodic scans, scheduled patch cycles and human reviewed alerts genuinely cannot keep up with AI accelerated attacks anymore, even as they compete on exactly how the replacement architecture should actually be built and who should control it

Rethinking security for the age of AI - The Official Microsoft Blogblogs.microsoft.com