AI agents redefine cybersecurity and drive CrowdStrike and Palo Alto actions after Black Hat

The Black Hat 2026 conference, held in Las Vegas, not only consolidated the reputation of the event as the most important of the global cybersecurity calendar, but also put AI agents at the heart of a new digital defense paradigm. The impact was immediate on the market: the actions of CrowdStrike and Palo Alto Networks achieved new historical maxims on Monday (10), driven by the consensus among experts that artificial genetic intelligence fundamentally changed the scenario of threats. According to BTIG analysts, who participated in the event, the dominant theme in the conference corridors was the urgent need to rethink security strategies before the advance of autonomous AI agents — both those used by attackers and those implemented by companies to defend themselves.

How are the AI agents turning security into Black Hat?

The 2026 edition of Black Hat made it clear that AI agents — autonomous systems capable of planning, executing and adapting actions with minimal human supervision — have become the main vector of concern for security teams worldwide. The consensus among the participants, highlighted by BTIG analysts in a note published after the event, is that these technologies have structurally changed the balance between attack and defense. While generating AI tools allow criminals to automate phishing campaigns, create changeable malware, and exploit industrial-scale vulnerabilities, security companies now need to develop equally autonomous and predictive defenses.

CrowdStrike and Palo Alto Networks appeared in this context as the major beneficiaries of this new digital arms race. The first, known for its cloud-based Falcon platform, has invested heavily in real-time AI threat detection. The second, in turn, bets on next generation firewalls that integrate machine learning models to anticipate malicious behaviors. The market reaction reflects precisely the perception that these companies are better positioned to capture the growing demand for solutions that can keep pace with AI-mediated attacks.

According to CNBC, which accompanied the stock movement, the advance was driven by a flow of institutional investors who see in the BTIG report a clear signal that the cybersecurity sector will enter a cycle of expansion sustained by the corporate adoption of AI agents — both to automate defenses and to protect AI agents themselves from kidnapping and manipulation.

AI agents: Why is this change crucial for Brazilian companies?

For the Brazilian market, Black Hat 2026's message could not be more direct: the adoption of AI agents in the Brazilian corporate environment continues to grow, and with it increases the surface of attack. A recent report from Fortinet pointed out that Brazil already accounts for a significant portion of cyber attack attempts in Latin America, and the sophistication of these attacks tends to increase with the use of generative AI by local criminal groups. Companies of all sizes therefore need to treat the security of AI agents as a strategic priority, not as a luxury item — and this includes from API protection to the implementation of governance policies for the internal use of these tools.

The good news is that the infrastructure available in the country already allows to accelerate this process. As shown in How nOps delivered FinOps agents 75% faster with Amazon Bedrock AgentCore, companies that adopt IA platforms with built-in security since design can dramatically reduce the implementation time of autonomous agents. The same principle applies to cybersecurity: those who already provide AI agents with identity controls, continuous monitoring and automated incident response will be one step ahead when the next wave of AI-based attacks arrives in the country.

AI agents: Which sectors should prepare for new threats?

Financial institutions, health operators, digital retail and critical infrastructure providers are, by the nature of the data they manipulate, the sectors most exposed to the new scenario described in Black Hat. But there is an additional warning that has come around the discussions of the conference: the risk of targeted attacks on the company's own AI agents. If an autonomous agent with access to internal systems and databases is compromised, the potential damage is exponentially greater than that of traditional malware — because the agent can act silently, exploit privileges and make decisions on behalf of the organization without immediate human supervision. The partnership between USA Today and Palantir to monetize audiences with AI shows exactly how much these agents are already integrated into critical business flows — which, by extension, makes their protection a matter of competitive survival.

AI agents: What to expect from the cybersecurity market in the coming months?

Historically, Black Hat functions as a reliable thermometer from where security investments will be in the next 12 months. If the 2026 edition pointed to AI as a central theme, the trend is that we see an acceleration of acquisitions and partnerships involving AI agents’ security-specialized startups — a segment that is still relatively fragmented. It is also likely that large suppliers, such as CrowdStrike and Palo Alto, will expand their managed security offerings with focus on detection and response to AI-driven threats, competing for corporate contracts that today still depend on isolated solutions.

In Brazil, the monitoring of this movement should be done with attention by CISOs and technology directors. Decisions to purchase security tools now will have a direct impact on companies' ability to resist AI-mediated attacks in the coming years. And as the CNBC report makes clear, the market is already prefiing this reality — cybersecurity actions are just the visible tip of a much deeper transformation that is just beginning.

AI agents in cybersecurity: FAQs

What are AI agents in the cybersecurity context?

They are autonomous systems that plan and execute actions with minimal human supervision, used both by attackers to automate attacks and by companies to accelerate detection and response to threats.

Why did CrowdStrike and Palo Alto's shares go up after Black Hat?

Because the conference consolidated the perception that AI agents fundamentally changed the threat scenario, and these companies are among the best placed to sell defense solutions to this new context.

What should Brazilian companies do in this new scenario?

Embed AI security from the design of your autonomous agents, review access governance policies and prioritize platforms that offer continuous monitoring and automated response to incidents.