New frontiers of cybersecurity: analysis of infrastructure risks in 2026

The “Identity-First Intrusion” model has established itself at the center of the technical debate. Contemporary cyber attacks no longer aim exclusively to breach hardware barriers, but aim to compromise the digital identity of users to gain privileged access. This paradigm shift makes credentials the prime target of cyber warfare.

At the same time, the criticality of the “AI Supply Chain” emerges. With the rise of AI-powered software, vulnerabilities in code libraries or external learning models can compromise entire supply chains. The historical reference to the Stuxnet case served as a warning: what was once an isolated event against critical infrastructure, today represents a systemic risk to the global digital supply chain.

The data from the 2026 Observatory, promoted by Tinexta Cyber ​​in collaboration with SentinelOne, confirm a growth trend in cyber attacks. The response of the institutions is moving towards strengthening the link between the State and technology companies.

During the conference, the need for a “coordinated, timely and effective response to cyber threats” was highlighted. The intervention of the National Agency for Cybersecurity and the Postal Police reiterated that national resilience depends on the ability to share information on emerging threats in real time. The challenge is no longer just technical, but organizational: creating a “Digital Trust” ecosystem that allows institutions and businesses to navigate a hostile environment with greater awareness of their weak points.

“Cyber threats are evolving with unprecedented speed, also driven by the increasingly widespread adoption of artificial intelligence and the growing interconnection of digital supply chains. In this scenario, it becomes essential to build a security model based on structured collaboration between institutions, businesses and new generations of innovators. Only through a shared approach, oriented towards prevention and resilience, will it be possible to effectively protect our country system, while strengthening trust in digital trust models and in the security of supply chains”, declared Gabriele Ferrieri, President of ANGI.

“In 2026, company perimeters are increasingly blurred, between cloud, mobility and interconnected digital supply chains. In this context, attacks evolve and affect the identity and relationships of trust between systems. The response can no longer be traditional: we need advanced defense models, which combine human skills and the power of AI and which protect the digital identity of each subject”, Andrea Monti, General Director of Tinexta Cyber.

“The disappearance of the traditional perimeter makes conventional defense models ineffective: today digital identities and supply chains constitute the critical perimeters on which security control is played. Davide Scatto, Advisory Security Services Director

“In a scenario without a perimeter, the extension of access and the integration between IT and OT amplify the impact of attacks, which can compromise not only data but also operational continuity. Defending identities and governing access therefore becomes essential to reduce systemic risk and protect increasingly exposed infrastructures.” Valerio Visconti, Group CISO Tinexta SpA

“Artificial intelligence is redesigning the perimeter of cyber risk in a silent, almost imperceptible way. To defend against threats that operate at machine speed, defense must be able to do the same. Governing the perimeter of AI is not a brake on growth: it is the condition that makes it sustainable.”, said Paolo Cecchi, VP Enterprise Sales MED Region, SentinelOne.