Most cybersecurity professionals anticipate an increase in spending on threat intelligence in 2026, driven by growing concerns over AI-assisted attacks and state-sponsored hacking campaigns, according to a recent study by Recorded Future. The research surveyed over 600 cybersecurity experts across various sectors, revealing that 91% plan to invest more in threat intelligence next year.
Survey respondents identified AI-assisted cyberattacks as an escalating threat, alongside state-backed operations and disruptions from cybercriminals. Richard LaTulip, Field Chief Information Security Officer at Recorded Future, noted that organizations are now contending with an expanded threat environment.
“AI has lowered the barrier to entry for cybercriminals, enabling them to scale the speed, volume and frequency of attacks,” said LaTulip. “This is occurring against a backdrop of increasingly sophisticated state-sponsored cyberthreats and high-profile ransomware attacks that can disrupt businesses and markets for weeks and months.”
The study highlights that many organizations are re-evaluating long-standing cybersecurity practices, indicating a transition from incident-driven responses to a more continuous monitoring approach for external threats. This shift underscores the importance of threat intelligence, which encompasses data and analysis concerning adversaries, their tools, and methods, allowing security teams to better understand potential threats and how they may manifest.
Recorded Future’s findings show that 68% of professionals utilize threat intelligence to enhance existing security tools, including firewalls, intrusion detection systems, and endpoint protection platforms. Additionally, 58% of respondents stated that their awareness and understanding of the threat landscape informs their business risk assessments, guiding their evaluations of critical vulnerabilities.
A significant portion of respondents, 32%, reported using insights from proactive monitoring of cyberthreats in daily decision-making, while security leaders leverage this data to prioritize tasks and allocate team resources effectively. The research also examined current budget allocations, revealing that 76% of organizations invested more than GBP £188,000 (USD $250,000) in threat intelligence in 2025.
Furthermore, 83% of organizations now have dedicated, full-time threat intelligence teams responsible for collecting, analyzing, and disseminating threat data throughout the business. This intelligence not only enhances security measures but also influences procurement decisions, with 65% of respondents using threat intelligence findings to guide their purchases of security technology.
LaTulip emphasized that organizations are reshaping their cybersecurity strategies around this intelligence-led model. “Organizations realize cyberthreats are constantly shifting and want to be better informed about what they are up against,” he said. “This is driving investment in threat intelligence, with cybersecurity evolving from a reactive, defensive approach to a proactive, holistic strategy that better informs risk management and security.”
The impact of threat intelligence programs on daily operations is notable. Over half of the surveyed security professionals, 54%, reported that such programs improve threat detection and response times. Additionally, 50% indicated enhanced efficiencies within security teams, citing that structured threat data allows for faster triage and incident handling.
Notably, 40% of respondents observed a reduction in the number of incidents following the implementation of threat intelligence programs, attributing this decline to improved preparation and targeted controls. A further 37% reported that clearer insights into relevant threats enable them to prioritize security efforts more effectively.
According to LaTulip, these developments also positively influence staff wellbeing. “Threat intelligence programs are helping cybersecurity teams to avoid burnout,” he said. “Rather than being overwhelmed by constant threats, professionals can prioritize the highest risks and concentrate on addressing these before they materialize into full-blown attacks. Budget, time, and resource can be better managed while also improving the speed and effectiveness of incident response.”
The evolving landscape of cybersecurity underscores an urgent need for organizations to adapt their strategies in response to emerging threats, particularly those enhanced by artificial intelligence. The industry appears poised for significant investment in threat intelligence, enabling a proactive approach to safeguard against increasingly sophisticated cyber threats.
See also
OpenAI Enhances Security Measures to Combat AI-Driven Cyberattack Threats
AI-Driven Security Observability Reduces Cyberattack Costs by £2.7M Annually for Businesses
AI-Driven Cyberattacks Fuel Shift to Password-less Security, Enhancing Digital Identity Management
Dechecker AI Checker Enhances Cybersecurity Reports with Human Insight and Clarity
CrowdStrike Reveals AI Strategies to Combat Rising Cyberattacks in CBS News Interview
