Cybersecurity Trends in 2026: Shadow AI, Quantum & Deepfakes

Cybersecurity Trends in 2026: Shadow AI, Quantum & Deepfakes

🎙 Jeff Crume 👥 1.8M 📅 December 29, 2025 ⏱ 20 min 👁 305K 📄 expert opinion 🧭 2026-08-06
Available in: English (current) Français

Keywords

shadow AIpost-quantum cryptographydeepfakesAI agentspolymorphic malware

Summary

In this video, Jeff Crume from IBM Technology reviews cybersecurity trends for 2026, building on previous year predictions. He first evaluates 2025 predictions, noting that shadow AI increased data breach costs by $670,000, deepfake instances surged 1,500% from 2023 to 2025, and AI-generated malware became more sophisticated. He highlights that AI has expanded the attack surface, with prompt injection remaining the top LLM vulnerability. On the positive side, AI is being used to improve incident response. He then discusses quantum computing, emphasizing the need for post-quantum cryptography before Q-Day. The main focus is on AI agents, which he predicts will be both targets and tools for attacks. Attacks on agents include hijacking, indirect prompt injection, and risks from non-human identities. Attacks by agents include hyper-personalized phishing, polymorphic malware, automated ransomware, and full kill chain automation. He also predicts increased social engineering using deepfakes, and advises that deepfake detection is futile, so training should focus on what actions are requested. Finally, he predicts increased regulation and compliance requirements for AI, and notes that AI will be used to defend against AI attacks. He concludes with a confession that he used AI to help write the video script.

196 words

Critical Evaluation

The video provides a comprehensive and well-structured overview of cybersecurity trends for 2026, delivered by an experienced IBM expert. The content is grounded in industry reports, such as IBM’s Cost of a Data Breach and OWASP’s Top 10 for LLMs, which adds credibility. The discussion of shadow AI’s financial impact and the rise of deepfakes is compelling, though some statistics lack specific citations. The analysis of AI agents is particularly insightful, distinguishing between attacks on agents and attacks by agents, and highlighting risks like indirect prompt injection and non-human identities. The argumentation is logical and accessible, with clear examples. However, the video is largely predictive and speculative, and while the expert’s experience lends weight, some claims are not empirically verified. The advice to abandon deepfake detection in favor of training users to focus on requested actions is pragmatic but debatable. The video also includes a brief sponsorship segment for IBM training, which is clearly disclosed. Overall, the content is valuable for professionals and enthusiasts, offering a balanced view of both threats and defenses. The title accurately reflects the content, and the presentation is engaging with visual aids. The main limitation is the lack of detailed sources for some data points, which could be improved for greater rigor.

207 words

Title / Content Match

The title accurately reflects the content, which covers Shadow AI, quantum computing, and deepfakes among other trends.

Quality & Reliability

8/10

The video is presented by an IBM expert (Jeff Crume) and references IBM's Cost of a Data Breach report and OWASP Top 10 for LLMs, lending credibility. However, some statistics (e.g., deepfake increase) lack specific sources, and predictions are inherently speculative.

Key Moments

Cited Sources

Concurring Sources

Dissenting Sources

  • Deepfake Detection Research — The video suggests deepfake detection is futile, but some research indicates detection methods are improving, though they may lag behind generation.

Contribution & Novelties

The video offers a forward-looking analysis of cybersecurity trends, particularly focusing on the dual role of AI agents as both targets and tools for attacks. It provides practical insights into emerging threats like shadow AI and post-quantum cryptography, and emphasizes the need for proactive measures. The discussion on deepfake detection futility and the shift towards training users to evaluate requested actions is a novel perspective.

Pour aller plus loin :

126 words

Radar Profile

The radar profile shows high scores in information quantity and quality, with a slightly lower technical level, indicating content that is informative and credible but not overly technical. The reliability score is also high, reflecting the expert's authority and use of industry reports.

Reliability 8/10

💬 Très positif. Sur les 30 commentaires analysés, la majorité exprime une appréciation claire, saluant la clarté des explications et la pertinence des prédictions, avec quelques retours constructifs sur des nuances à approfondir.