Topic starter
25/10/2026 11:11 am
TL;DR: AI-generated deception and autonomous attack paths are making verification harder and shrinking response time, according to DNSFilter. Identity programmes now need stronger authentication, verified workflows, and governance for AI-mediated decisions.
Editorial analysis by NHI Mgmt Group, based on content published by DNSFilter: “7 Cybersecurity Predictions for 2026”.
By the numbers:
- AI traffic on the DNSFilter network has grown 69% over the past 12 months.
Key questions
Q: Why do autonomous AI attacker tools create more risk than ordinary automation?
A: Ordinary automation follows predetermined paths.
Q: Why do deepfakes create risk even in Zero Trust environments?
A: Zero Trust reduces implicit trust in systems, but deepfakes exploit the human layer where people still make exceptions based on familiarity, urgency, or authority.
Q: What breaks when employees can no longer reliably tell real requests from AI-generated ones?
A: The control that breaks first is trust-based decision-making.
Practitioner guidance
- Strengthen phishing-resistant authentication Prioritise MFA methods that do not depend on human recognition of a sender, voice, or message style, especially for finance, admin, and support workflows.
- Redesign high-risk approvals for verified channels Move sensitive actions such as password resets, payment changes, and privilege grants into authenticated workflows with explicit verification checkpoints.
- Treat AI-generated social engineering as a governance issue Update acceptable-use, incident-response, and employee awareness policies so they address synthetic impersonation, not only traditional phishing.
Bottom line: AI is making deception more convincing and more scalable, which weakens the reliability of human judgment as a security control.
Glossary terms: Synthetic trust, Phishing-Resistant Authentication, Autonomous Attacker, Trust Boundary
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
This topic was modified 7 days ago by NHI Mgmt Group
27/10/2026 7:17 pm
Authenticity is becoming a security control, not a social quality: Once AI can imitate voices, writing styles, and conversational context at scale, organisations can no longer rely on surface cues to validate intent. That shifts governance from simple user awareness toward authenticated channels, step-up verification, and stronger trust boundaries. The practical implication is that identity teams must treat authenticity failures as access-control failures, not awareness failures.
A question worth separating out:
Q: What should organisations do first to reduce AI impersonation risk in live calls?
A: Start by identifying which business processes depend on real-time communication for approval, payment, or account change. Then add a separate verification method for those workflows before any action is taken. The first priority is to remove the assumption that a familiar voice is enough.
👉 Read our full editorial: 2026 predictions point to synthetic trust and identity pressure
This post was modified 7 days ago by NHI Mgmt Group