New research continues to emerge that paints a clearer picture of how AI agents are reshaping the cyber threat landscape.

A new study by the Economist and supported by Rubrik delivers one of the most staggering findings on the topic to date: 98% of businesses report having experienced a disruptive, agent-related incident since rolling them out.

And yet, adoption is set to grow 44-fold in the next ten years as agents evolve from experimental, to widely deployed, to critical components of core enterprise infrastructure.

Are we moving too quickly?

Rubrik Zero Labs findings confirm agents are entering production faster than enterprises can govern them. Of those surveyed for our report, 86% believe their guardrails aren’t keeping up with agentic adoption.

Confidence in ability to meet recovery timelines is dropping as a result, with CXOs especially concerned about the effect of agents on their ability to meet RTOs.

Power without control: Rethinking cybersecurity for the age of agentic AI may be one of the most important new pieces of research for defining what cyber resilience looks like when incidents become inevitable. I hope you’ll explore the findings in full.

Featured CXO, Maire CIO Michele Mariella, describes the necessary response as one of “anti-fragility.” This entails building resilience by prioritizing recoverability at least as high as observability.

This edition of the CXO Signal is all about resilience-building—whether that’s staying up on the latest threat intel, involving your teams in our new practitioner community, or joining us for an upcoming experience for peer-to-peer knowledge sharing. I hope you enjoy.

The threat actor known as PCPcat, first documented by Rubrik Zero Labs in December 2025, has elevated its tradecraft and shifted its focus to supply chain compromise.

The campaign initially focused on exposed cloud infrastructure, container platforms, Kubernetes environments, and vulnerable internet-facing applications. But, as the operation matured, TeamPCP shifted its focus toward trusted software distribution channels and developer ecosystems.

Early cloud-focused activity gave way to increasingly sophisticated supply chain techniques, demonstrating how modern software development ecosystems have become high-value targets for threat actors seeking privileged access and broad downstream reach.

The race for AI dominance has created a dangerous imbalance between business velocity and cyber resilience. In this episode, host Caleb Tolin is joined by Joe Hladik, Head of Rubrik Zero Labs, and Staff Security Researcher Amit Malik to break down the findings of their latest report on agentic adoption.

The discussion centers on the Agentic Paradox. This is the technical reality that tools designed to automate high-level tasks are inherently built to find the most efficient path around obstacles, including existing security policies.

Listen on Apple, Spotify, or watch on YouTube.

The Brown Family Wine Group runs a lot more than a winery. The business spans agriculture, manufacturing, distribution, warehousing, and hospitality across Victoria, Australia. On a bad day, their backup tapes could be found in the boot of a car while two team members strapped in for a three-hour car ride to a remote DR facility.

So it didn’t take a catastrophe to initiate a search for a new solution. But the results were nevertheless dramatic: a 47.5-hour reduction in DR for their regional production environment.

Learn how the Brown Family Wine Group managed it on our technical blog hub.

CXO Collectives and Summits are unique opportunities to discuss pressing challenges, advise on strategies, meet Rubrik executives, and strengthen your network through lasting connections.