AI-Driven Cybersecurity Spending to Surge in 2027

The rapid development of AI has transformed cybersecurity from an optional investment to a mandatory expenditure for enterprises. According to JPMorgan Chase's latest report, the total addressable market (TAM) corresponding to AI-driven incremental security spending over three years may exceed $4.3 trillion U.S. dollars.

As AI lowers the attack threshold and shortens the vulnerability exploitation window, the average time between public disclosure of a vulnerability and its exploitation has dropped from 63 days in 2018 to negative 7 days in 2025. Generative AI has also improved the automation of attacks, allowing models to independently search for zero-day vulnerabilities and develop exploit programs.

The development of open-source models is further lowering the access threshold for such capabilities. As a result, cyberattacks no longer rely entirely on high-level attackers, increasing the number of potential attack subjects that enterprises need to face.