BeyondTrust has announced its top cybersecurity predictions for 2026 and beyond, identifying the trends that will redefine how organisations protect identities, secure data, and prepare for a rapidly evolving threat landscape.
The annual forecast, developed by leading BeyondTrust experts, Morey J. Haber, Chief Security Advisor; Christopher Hills, Chief Security Strategist; and James Maude, Field Chief Technology Officer, highlights key developments expected in the next year, as well as those on the horizon expected to redefine security strategies over the next five years and beyond.
“Cybersecurity has always been a forward-looking discipline,” said Morey J. Haber, Chief Security Advisor at BeyondTrust. “By anticipating where technology, threat actors, and regulation are heading, we can better protect our customers and help the industry prepare for what’s next. Looking ahead allows us to adapt faster and turn insight into proactive security action.”
Cybersecurity predictions for 2026+: Identity, AI, and geopolitics collide
Agentic AI becomes the ultimate attack vector: In the next year, nearly every connected device will embed agentic AI, rapidly expanding convenience, and the attack surface. Rushed deployments and limited oversight will create new vulnerabilities, leading to a surge in AI-driven breaches.
AI “Veganism” emerges: A growing number of individuals and organisations will opt out of AI usage altogether, citing privacy, ethics, and environmental concerns. This “AI Veganism” movement will push companies toward greater transparency and “opt-out” options in AI-driven products and workflows.
Digital tariffs redefine data sovereignty: Governments will begin taxing or restricting digital services provided across borders, effectively creating “digital tariffs” that drive regional innovation and alter global data flows.
The death of VPN: Legacy VPNs will officially enter their end-of-life phase as organisations move to modern, identity-based remote access solutions. Traditional VPNs will increasingly be viewed as liabilities rather than enablers.
Account poisoning becomes a financial threat: Cybercriminals will automate the manipulation of trusted financial accounts, inserting fraudulent billers and diverting payments to third-party brokers. Stronger identity validation and transaction integrity will become mandatory.
MITRE rises from the ashes: Following leadership and funding turmoil, the MITRE ATT&CK framework will evolve or reemerge under a new banner—reborn to meet modern risk mitigation demands.
The nomadic workforce challenges security boundaries: As “digital nomads” relocate globally, organisations will face rising identity and compliance risks tied to unmanaged geographies and devices. Strong identity visibility will become the new anchor to secure this mobile workforce.
Geolocation trackers weaponised: Low-cost tracking devices such as AirTags and Tiles will increasingly be exploited for reconnaissance and hybrid cyber-physical attacks, prompting stricter anti-tracking safeguards.
Voice-driven home security takes hold: New voice-to-home automation capabilities will allow consumers to securely configure connected systems through natural speech, marking a new phase in simple, secure smart-home management.
The next frontier: 5+ year predictions
AI fractures and reforms: The AI boom will splinter into micro-disciplines—from agentic AI to generative AI—with many failing to deliver meaningful results. As the AI bubble bursts, the market will consolidate around a smaller number of proven, financially sustainable models.
Biological computing pushes beyond silicon: Emerging “biological computers,” powered by living neurons grown on chips, will surpass traditional silicon and quantum technologies. Ethical debates will intensify around computing systems capable of independent thought.
Companion AI becomes mainstream: AI companions—evolving from digital assistants to emotionally intelligent partners—will merge with robots and androids to provide physical and emotional connection, transforming homes, workplaces, and care environments.
You are the new cryptographic key: Advanced biometrics using signals from wearables and continuous authentication will eliminate traditional passwords, creating a frictionless, phishing-resistant identity experience.
Supply chain risk multiplies: Global supply chains will remain high-value targets. New standards like AI/ML bills of materials (BOMs) and Cryptographic BOMs (CBOMs) will emerge to increase transparency and defend against systemic exploitation.
Autonomous cities rise: Fully autonomous smart cities—where vehicles, commerce, and services operate independently—will move from concept to reality, raising unprecedented cybersecurity and ethical questions.
Discussion about this post