Are APAC organisations ready for the new rules of AI and quantum cyberwarfare?

AI is already a staple within cyber operations; however, the advent of quantum computing introduces an even deeper structural risk. 

Zak Menegazzi
5 Min Read

Recent announcements such as Singapore’s Research, Innovation and Enterprise 2030 and Australia’s recent Federal Budget demonstrate a clear commitment to emerging technologies. While investment in initiatives advancing quantum cement the focus on innovation, it is important for organisations to consider and prepare for when the technologies begin rewriting the rules of cyberwarfare. 

When technologies amplify each other

AI is already a staple within cyber operations; lowering the barrier to entry, allowing adversaries to automate reconnaissance, generate exploits and scale campaigns at an unprecedented pace. However, the advent of quantum computing introduces an even deeper structural risk. 

These advancements are compressing years of capability development into a much shorter window. And yet, many defensive responses remain foundational at best. Measures such as multi-factor authentication and password policies are still widely relied upon, but they’re no longer sufficient on their own in the face of autonomous, agentic threats. This is further hampered by growing operational gaps and an ever-expanding attack surface.

And yet, the biggest challenge lies in that convergence. When these technologies begin amplifying one another, cyber conflict evolves into something far more complex to understand and control. It creates new pathways for exposure across interconnected systems, software and infrastructure. In fact, 65% of IT decision-makers believe this convergence will drive an unprecedented escalation in cyber conflict capabilities, expanding the ways organisations can be exposed.

Cyber exposure management for the next era

Put simply, autonomous agents cannot be stopped with just a manual ticket or a human analyst. There needs to be machine-on-machine weaponry. The most effective shift organisations can now make is moving away from reactive security strategies toward a deeper, continuous understanding of cyber exposure.

In an environment where emerging technologies and interconnected systems create countless new pathways for compromise, resilience depends on knowing how risk forms across the entire digital ecosystem, not just responding once it’s exploited. This requires a different lens when viewing cybersecurity. Rather than treating vulnerabilities, alerts or incidents as isolated technical problems, organisations must understand how assets, software, identities and infrastructure connect across IT, cloud, OT and increasingly complex supply chains. The real risk rarely sits in a single vulnerability; it emerges from the relationships between systems, and the pathways attackers can exploit between them.

Exposure-centric security focuses on making those relationships visible. By continuously mapping assets, dependencies and access paths across the environment, security teams gain the context needed to identify where risk is truly concentrated and which exposures could have the greatest operational impact.

This becomes even more important as emerging technologies accelerate the pace of digital change. AI is already expanding the scale and complexity organisations must defend. Quantum computing threatens to push this even further. Attackers are already adapting to this trajectory, using AI to probe systems and identify weaknesses at machine speed while some nation-state actors adopt “harvest now, decrypt later” tactics; collecting encrypted data today in anticipation that future quantum breakthroughs will render it readable.

As APAC organisations pursue growth, they must also defend themselves by  applying automation and AI in the same way: analysing vast volumes of assets, behavioural and vulnerability data in real time to surface the exposures that matter most. When done effectively, this shifts security teams away from chasing thousands of alerts and toward anticipating how adversaries might move through interconnected systems.

In this model, preparedness is no longer defined by how quickly organisations respond to attacks, but by how clearly they understand their digital environment to proactively secure it before those attacks occur.

Preparing for the next era of cyber conflict

Emerging technologies are accelerating cyber conflict in ways few defensive models were built to contain and in ways we’re still yet to fully understand. But waiting for these capabilities to mature before acting is a wildly dangerous assumption, particularly when bad actors are already experimenting with them in the wild.

The challenge now facing organisations is speed. The window between vulnerability discovery, exploitation and real-world impact is shrinking rapidly as technologies converge and automation removes the human bottleneck from cyber operations. In this environment, resilience now means continuously understanding digital ecosystems, while anticipating how exposure forms and adapting as quickly as the technologies that are reshaping the threat landscape. 

Follow:
Zak Menegazzi is an accomplished leader with extensive experience in leadership roles across various cybersecurity and technology firms. In his current role as APJ Director at Armis for ServiceNow, Zak serves as a trusted advisor to ANZ and APJ enterprises. He focuses on providing guidance to organisations in the region to drive greater adoption of cybersecurity best practices. Prior to Armis, Zak held territory, channel sales and management roles.