DOUBLE DUTY: AI will reshape APAC cybersecurity in 2026, says Kaspersky

Asia Pacific (APAC) is no longer just participating in the global AI race, it is setting the pace. In APAC, 78% of surveyed professionals use AI at least weekly, compared with 72% globally, highlighting the region’s rapid and widespread adoption of AI in daily workflows.

But what truly distinguishes APAC is how AI is taking root: adoption is rising from the ground up, powered by hyper-connected consumers, massive device penetration, and tech-savvy younger populations that integrate AI into their daily experiences long before enterprises formally roll it out. This bottom-up momentum, reinforced by robust investment, CEO-led strategies, and fast-growing digital markets, is turning APAC into the world’s most dynamic AI proving ground, where “AI Frontier” companies are born and where the future of enterprise transformation is emerging first.

As AI adoption accelerates across the region, the implications extend far beyond enterprise productivity and customer experience. For cybersecurity leaders, APAC’s position at the field of AI innovation makes it both a model and a warning: the same technologies driving business transformation are also redefining how threats are created, automated, and deployed.

Kaspersky experts outline how the development of AI is reshaping the cybersecurity landscape in 2026, both for individual users and for businesses. LLMs are influencing defensive capabilities while simultaneously expanding opportunities for threat actors.

1. Deepfakes are becoming a mainstream technology, and awareness will continue to grow. Companies are increasingly discussing the risks of synthetic content and training employees to reduce the likelihood of falling victim to it. As the volume of deepfakes grows, so does the range of formats in which they appear. At the same time, awareness is rising not only within organizations but also among regular users: end consumers encounter fake content more often and better understand the nature of such threats. As a result, deepfakes are becoming a stable element of the security agenda, requiring a systematic approach to training and internal policies.
2. Deepfake quality will improve through better audio and a lowering barrier to entry. The visual quality of deepfakes is already high, while realistic audio remains the main area for future growth. At the same time, content generation tools are becoming easier to use: even non-experts can now create a mid-quality deepfake in just a few clicks. As a result, the average quality continues to rise, creation becomes accessible to a far broader audience, and these capabilities will inevitably continue to be leveraged by cybercriminals.
3. Efforts to develop a reliable system for labeling AI-generated content will continue. There are still no unified criteria for reliably identifying synthetic content, and current labels are easy to bypass or remove, especially when working with open-source models. For this reason, new technical and regulatory initiatives aimed at addressing the problem are likely to emerge.
4. Online deepfakes will continue to evolve but remain tools for advanced users. Real-time face and voice swapping technologies are improving, but their setup still requires more advanced technical skills. Wide adoption is unlikely, yet the risks in targeted scenarios will grow: increasing realism and the ability to manipulate video through virtual cameras make such attacks more convincing.

5.Open-weight models will approach top closed in many cybersecurity-related tasks,, which create more opportunities for misuse. Closed models still offer stricter control mechanisms and safeguards, limiting abuse. However, open-source systems are rapidly catching up in functionality and circulate without comparable restrictions. This blurs the difference between proprietary models and open-source models both of which can be used efficiently for undesired or malicious purposes.

6. The line between legitimate and fraudulent AI-generated content will become increasingly blurred. AI can already produce well-crafted scam emails, convincing visual identities, and high-quality phishing pages. At the same time, major brands are adopting synthetic materials in advertising, making AI-generated content look familiar and visually “normal.” As a result, distinguishing real from fake will become even more challenging, both for users and for automated detection systems.
7. AI will become a cross-chain tool in cyberattacks and be used across most stages of the kill chain. Threat actors already employ LLMs to write code, build infrastructure, and automate operational tasks. Further advances will reinforce this trend: AI will increasingly support multiple stages of an attack, from preparation and communication to assembling malicious components, probing for vulnerabilities and deploying tools. Attackers will also work to hide signs of AI involvement, making such operations harder to analyze.
8. AI will become a more common tool in security analysis and influence how SOC teams work. Agent-based systems will be able to continuously scan infrastructure, identify vulnerabilities, and gather contextual information for investigations, reducing the amount of manual routine work. As a result, specialists will shift from manually searching for data to making decisions based on already-prepared context. In parallel, security tools will transition to natural-language interfaces, enabling prompts instead of complex technical queries.

“AI is reshaping cybersecurity from both sides. Attackers are using it to automate attacks, exploit vulnerabilities, and create highly convincing fake content. At the same time, defenders are applying AI to scan systems, detect threats, and make faster, smarter decisions. AI is a powerful tool for both offense and defense, and the ability to manage it safely will definitely influence the future of cybersecurity,” — comments Vladislav Tushkanov, Research Development Group Manager at Kaspersky.

For his part, Adrian Hia, Managing Director for Asia Pacific at Kaspersky said, “Asia Pacific is setting the global pace for AI adoption, with consumers and enterprises advancing faster than any other region. This momentum is creating tremendous opportunity, but also redefining how cyber threats emerge and scale. As businesses navigate this shift, they can rely on Kaspersky’s more than 20 years expertise to strengthen their defenses.”

Follow this link (https://lp.kaspersky.com/global/ksb2025/) to learn more about other KSB reports.

To protect their AI-driven transformation, Kaspersky has below recommendations for APAC organisations:

• Always keep software updated on all the devices you use to prevent attackers from infiltrating your network by exploiting vulnerabilities
• Do not expose remote desktop services (such as RDP) to public networks unless absolutely necessary and always use strong passwords for them
• Use advanced Kaspersky Next security products for comprehensive visibility across all company’s corporate infrastructure to rapidly hunt out, prioritize, investigate and neutralize complex threats and APT-like attacks
• Use the latest Threat Intelligenceinformation to stay aware of actual TTPs used by threat actors
• Back up corporate data regularly. Backups should be isolated from the network. Make sure you can quickly access the backups in an emergency if needed