CERT24Study: How Enterprise AI Adoption Changes the SOC Alert StreamLoading data…
CERT24Threat Observatory
Period

Study: How Enterprise AI Adoption Changes the SOC Alert Stream

The study found that AI-related alerts accounted for 0.43% of all alerts reviewed in enterprise SOCs, with their share increasing by 685% from February to June 2026. Of the alerts, 94.1% were classified as noise, 5.8% as genuine security risks, and 0.02% as real attacks. None of the confirmed attacks investigated was caused by an organization’s own AI agent; the genuine attack activity observed used AI brands as phishing lures.

← Back to intelligence

Study: How Enterprise AI Adoption Changes the SOC Alert Stream

The study found that AI-related alerts accounted for 0.43% of all alerts reviewed in enterprise SOCs, with their share increasing by 685% from February to June 2026. Of the alerts, 94.1% were classified as noise, 5.8% as genuine security risks, and 0.02% as real attacks. None of the confirmed attacks investigated was caused by an organization’s own AI agent; the genuine attack activity observed used AI brands as phishing lures.