Back B2B-Cyber-Security.De AI is becoming the biggest security risk in the DACH region
AI is now causing companies in the DACH region more concern than traditional malware. At the same time, companies don't want to hinder the use of AI, but rather to exert greater control over it. Approved applications, human oversight, and transparent decision-making are particularly important.
The results do not show, however, that companies want to slow down the use of AI. Rather, the new threat landscape is changing the requirements for its deployment. In the DACH region (Germany, Austria, and Switzerland), AI must be controllable, LLMs (Learning Lifetime Managers) must be explicitly permitted, and humans should remain involved in security-relevant decisions. This same understanding of security is also reflected in the selection of cybersecurity providers: A regional Security Operations Center (SOC) and digital sovereignty play an important role in purchasing decisions for many companies.
“The results show that companies do not view AI as a replacement for human expertise, but rather as a tool that must be used in a controlled and responsible manner,” said Christopher Fielder, Field CTO at Arctic Wolf. “As AI becomes more widespread, expectations for transparency, traceability, and trust are also rising. Successful security strategies must therefore combine the speed and scalability of AI with the experience and judgment of human analysts.”
The most important results for the DACH region at a glance
AI has overtaken malware as the biggest cybersecurity concern. 38 percent of respondents cite risks related to AI as their biggest challenge in the area of cybersecurity – only 21 percent still see malware as the top priority.
Companies want to use AI in a controlled manner. They value controllable AI, approved LLMs, and human oversight.
Digital sovereignty influences security decisions. For 82 percent, a Security Operations Center within Europe strengthens trust in a cybersecurity provider.
Cyberattacks continue to have a significant impact on business operations. Almost one in three companies in the DACH region that were affected by a security breach reported business interruptions lasting several weeks.
This aligns with a global trend: worldwide, risks surrounding AI and LLMs are becoming the biggest cybersecurity concern for companies. At the same time, organizations increasingly expect AI-supported security features, but remain hesitant autonomously acting AI systems and do not want to make critical decisions without human oversight.
The Arctic Wolf 2026 AI & Cybersecurity Trends Report is based on a global survey of 1.350 IT and security decision-makers. For the DACH analysis, the results from Germany, Austria, and Switzerland were analyzed separately.
Matching articles on the topic
AI is now causing companies in the DACH region more concern than traditional malware. At the same time, companies want to expand their use of AI.
The Computer Emergency Response Team for Poland, CERT Polska, has identified six vulnerabilities in MikroTik RouterOS, two of which are in
In the last twelve months alone, Kaspersky has registered more than 390.000 phishing attacks that misused legitimate cloud platforms.
Cisco has closed a serious security vulnerability in some Nexus 9000 series switches that allowed attackers to gain complete control without authentication.
The US agency CISA has added the highly dangerous vulnerability CVE-2026-85046 in Chrome's JavaScript engine V8 to its catalog of known and exploited vulnerabilities.
The US Department of Justice, together with international partners, conducted a large-scale operation against the Sality botnet. The operation targeted infrastructures of the botnet.
Dropbox has confirmed a security incident in which attackers exploited a vulnerability in Lenovo to gain unauthorized access to approximately 5.000 Dropbox user accounts.
AI Readiness: The intranet with SharePoint Online is consistently aligned with the requirements of the AI-supported workplace. In addition to the structural organization of information.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
