Check Point Software CTO Discusses AI’s Impact on Cybersecurity at Engage 2026
In a recent interview with CSO Spain at the Engage 2026 user conference held in Paris, Jonathan Zanger, Chief Technology Officer of Check Point Software, shed light on the evolving landscape of cybersecurity, particularly in the context of artificial intelligence (AI). This annual conference served as a platform for Check Point executives to delve into the multifaceted challenges posed by cyber threats and the opportunities presented by AI.
Zanger characterized 2026 as a pivotal year in the realm of cybersecurity, noting, "This is a fascinating year to work in this field. Every technological change drastically affects cybersecurity." He emphasized the ongoing transformation is the most significant since the inception of the internet, marking this period as one filled with considerable changes and challenges.
During the discussion, Zanger addressed how AI has revolutionized the approach taken by cybersecurity firms, including Check Point. Traditionally, cybersecurity relied heavily on expert teams to monitor threats and develop strategies to protect clients. Zanger stated that while the human element remains critical, AI has significantly enhanced their capabilities. “We’ve always had teams of experts monitoring threats, identifying malicious actors, and creating new defenses for our products,” he explained, highlighting that AI technology has enabled a much larger and more efficient operational scale.
He offered a concrete example of this advancement: “Our red teams, who have historically tested our products, now operate with AI assistance, making them up to 20 times more efficient.” This blend of human expertise and AI capabilities has resulted in approximately 300 instances continuously monitoring and testing systems, thereby enhancing the overall cybersecurity framework.
However, Zanger also acknowledged the flip side to these advancements. As defenders have adopted AI to fortify their strategies, malicious actors have likewise utilized the technology to enhance their operations. The rise of smaller, faster cyber threat groups has become apparent, with unskilled individuals now able to execute sophisticated phishing attacks leveraging AI tools. “We’re seeing more people entering the field of offensive cybersecurity,” Zanger added, highlighting a pressing need for organizations to adopt robust AI protection measures.
The discussion further navigated the complexities introduced by AI in the enterprise environment. Zanger explained that traditional systems were deterministic — they produced predictable outcomes based on input. In contrast, AI systems introduce a layer of unpredictability, complicating the cybersecurity landscape. "AI agents can understand natural language and handle ambiguity, which makes them challenging to secure," he elaborated. This unpredictability results in a broader attack surface for organizations, amplifying security risks.
When asked about the threats posed by generative AI, Zanger noted the accelerated pace at which cybercriminals are now able to construct their attacks. "AI has transformed software development, making it much faster and more accessible," he remarked. This rapid evolution enables attackers to execute sophisticated phishing, ransomware, and malware attacks with increased speed and volume.
In response to these evolving threats, Zanger advocated for a proactive approach by defenders. The principles of detection and response are now insufficient, as attacks can inflict significant damage in mere seconds. He stressed, "Prevention plays a key role," urging organizations to foster collaboration among their security teams. Zanger emphasized that while attackers often have the initiative, defenders can leverage their collective strengths to level the playing field.
Despite the advancements in AI technology, vulnerabilities remain commonplace. Zanger highlighted the disparity between innovation and security, urging organizations to integrate security measures from the outset of any AI project. “Do not assume that a platform is secure just because it’s from a reputable vendor,” he cautioned, indicating the importance of thorough security assessments.
Discussing how AI platforms can be utilized securely, Zanger reiterated the necessity of prioritizing security throughout the development lifecycle. He pointed out that many platforms have demonstrated vulnerabilities during assessments conducted over the past year, suggesting that organizations collaborate with cybersecurity firms like Check Point to mitigate risks effectively.
Reflecting on lessons learned from deploying AI, Zanger asserted that incorporating a layer of security into any AI deployment is crucial. Furthermore, he stressed that organizations must not take the security of AI systems for granted, regardless of the vendor’s reputation.
Zanger also identified three transformative areas within cybersecurity where AI is making significant inroads. First, AI aids in strengthening defense operations, allowing security teams to swiftly detect vulnerabilities and respond to threats more efficiently. Second, there’s an essential focus on securing AI applications themselves, preventing these technologies from becoming new attack vectors. Lastly, Zanger underscored the importance of preparing defenses against increasingly advanced AI-driven attacks. He recommended utilizing advanced models capable of detecting zero-day vulnerabilities as a proactive measure.
Finally, addressing the needs of small and medium-sized enterprises, Zanger emphasized the significance of transparency and understandability in AI applications. It is crucial for organizations to automate threat blocking while empowering human operators to understand the rationale behind those actions. This balance ensures that security remains robust without sacrificing the ability to learn and adapt.
As businesses continue to navigate the complexities of cybersecurity in an AI-driven landscape, Zanger’s insights provide valuable guidance for adopting innovative defenses while mitigating potential risks.