Companies spending more on cybersecurity but still struggling with AI oversight

Companies are spending more on cybersecurity, but many still lack control over the AI tools their employees use.

A new report from DNSFilter, based on 400 IT and cybersecurity workers, found that three-quarters of respondents had increased security budgets over the past 12 months. About one-fifth said their budgets had grown by more than 10%. Four in 10 said their next dollar would go to AI security and governance, well ahead of cloud security at 25%.

DNSFilter warned that higher spending does not by itself secure networks. Many organizations have lax AI policies, and 46% of respondents were confident that unapproved AI apps were connected to their systems. One-fifth said an unapproved AI integration had already led to a security incident. Policies, the report said, have not kept pace with budgets.

Oversight gaps are also visible in day-to-day management. Thirty-seven percent learn about AI app connections only after the fact, and another 7% do not require employees to notify IT at all. Sixty-two percent were unsure all their security tools were properly configured, and the same share could not confirm that all tools were actively monitored.

Key points

• Three-quarters of 400 surveyed IT and cybersecurity workers increased budgets over the past 12 months.
• Four in 10 said their next dollar would go to AI security and governance; cloud security was second at 25%.
• 46% were confident unapproved AI apps were connected to their company systems.
• One-fifth reported a cybersecurity incident caused by an unapproved AI integration.
• 62% were unsure all security tools were properly configured or actively monitored.

Why it matters

The report suggests that rising security spending is not closing governance gaps, so companies face risk from AI tools they cannot see or control.