Cisco has highlighted a shift in the cybersecurity landscape: the rapid acceleration of cyber threats driven by artificial intelligence (AI). As AI models accelerate the ability to find vulnerabilities and generate exploits, the time between disclosure and weaponization has, in some instances, shrunk from weeks to days or hours.
Many organizations remain vulnerable by relying on outdated infrastructure and security postures built for human response speeds. According to Cisco Talos’ 2025 Year in Review, enterprises can take 43 days to patch critical vulnerabilities, and 40% of the most targeted flaws affect systems with limited patching options.
To address this growing exposure gap, Cisco is urging technology leaders to adopt a new operating model for resilient infrastructure, transitioning from periodic discovery and reactive response to a continuous, AI-accelerated defense model.
“As AI reshapes the threat landscape, organizations across the Middle East cannot afford to rely on legacy cyber defense models,” said Fady Younes, Managing Director for Cybersecurity at Cisco Middle East, Türkiye, Africa, Caucasus and Central Asia (METAC). “With the region advancing its digital economy and smart infrastructure, defenders must use AI to outpace attackers. By adopting a continuous defense strategy, Middle Eastern enterprises can reduce exposure, strengthen business resilience and build the trust required for lasting innovation.”
Demonstrating the power of AI in cyber defense, Cisco’s Security and Trust Organization recently used several frontier AI models to scan 1.8 billion lines of code across more than 25 languages in just eight weeks, a task Cisco estimates would have taken eight years without AI.
Building on these insights, Cisco’s new executive brief outlines three practical shifts organizations can make to achieve continuous resilience:
- Making remediation continuous: Patching and upgrading can no longer be treated as emergency drills. They must become part of a predictable, continuous operating rhythm.
- Using modernization to reduce risk: Unsupported and end-of-life assets create unnecessary exposure that IT and security teams should not have to carry indefinitely. Organizations should use modernization to remove risks that cannot be addressed through patching.
- Elevating security posture: Defenders must match the speed of modern threats by segmenting environments to contain attack impact, closing identity gaps and equipping security operations center teams with the tools to act rapidly and confidently.
