RSAC 2026: No easy fixes for expanding AI attack surface, but a coordinated response is emerging

A RSAC 2026 roundup highlighting that AI and agentic systems are reshaping the threat landscape: vendors and practitioners reported active threats such as PromptLock AI-powered ransomware appearing in the wild, Tycoon2FA-derived large-scale authentication bypasses, AI-generated self-mutating malware, the Whisper Leak TLS side-channel, and persistent secret sprawl—underscoring broad, high-impact risks across authentication, API/mobile, model/LLM traffic privacy, and supply-chain/business disruption while vendors demonstrate mitigations and new architectures.