SANS: Top 5 Most Dangerous New Attack Techniques to Watch

SANS' RSAC 2026 keynote outlines five AI-powered attack vectors reshaping the threat landscape: AI-generated zero-days lowering the cost of exploit research, pervasive software supply-chain compromises, critical-visibility gaps and destructive risk in OT environments, irresponsible AI use undermining DFIR, and rapidly automated AI-driven campaigns — illustrated by Shai-Hulud, the Notepad++ update compromise, a disruptive OT incident in Poland, and the GTG 1002 campaign — with recommendations to accelerate patching, increase OT visibility, validate AI forensics, and adopt AI-augmented defensive workflows.