The Next Six Months of Offensive Security

AI is changing cybersecurity, but not in the way many headlines suggest. Attackers will not suddenly have entirely new goals or novel classes of tradecraft. But the economics of offense will be dramatically altered.

XBOW CISO Nico Waisman; Hacker, CEO, and CISO Jason Haddix; and OpenAI Technical Staff Member Dave Aitel recently came together to examine this shift at a panel discussion for RSAC 2026.

This paper pulls from that discussion to highlight their thoughts about, questions on, and recommendations for this next phase of cybersecurity.