Opens in a new tab
vmblog logo 2024 wht (updated)

Cybersecurity's Next Chapter: Simplicity, Zero-Trust Backups, and a New Insurance Playbook

Share: 

David Marshall | Published: December 17, 2025

vmblog-2026-prediction-series   

Industry executives and experts share their predictions for 2026.  Read them in this 18th annual VMblog.com series exclusive. 

By David Bennett, CEO of Object First 

As 2025 comes to a close, many of the reflections and forward-looking tech predictions I’ve read have focused on AI and cybersecurity threats – and rightfully so. AI has accelerated faster than any technology we’ve seen in the past 20 years, bringing changes to every field and job role.

As CEO of Object First – a company that helps Veeam customers become cyber resilient with simple, absolutely immutable backup storage – I’ve seen the impact AI-driven ransomware attacks have on organizations’ IT infrastructure. This past year, I’ve noticed three often overlooked side effects of the changing threat landscape that I predict will drive C-suite decision making in 2026: Burnout among IT professionals; risks associated with AI tools; and shifting cyber insurance policies.

Burnout Among IT Professionals

Ransomware and the threat of attacks are increasingly creating an environment of burnout and pressure among IT teams, and in 2026, organizations will be forced to take the mental health of their cyber teams more seriously. In a recent survey of IT/security professionals, 84% reported feeling uncomfortably stressed at work, and more than half said that stress is negatively impacting their job performance. Due to this stress, 59% have considered or actively begun looking for new jobs, leading to a cybersecurity brain drain that can cost companies substantially in loss of institutional knowledge and resources spent hiring and training new talent.  

Investing in the well-being of people in these roles will be crucial in 2026. It not only supports employees personally but also avoids attrition in areas where failure is a threat to the entire business. Last year, I predicted the ongoing cybersecurity talent shortage would prompt a return to simplicity for tech in 2025, which to an extent came true with the rise of platforms among tech vendors. However, I think in 2026 this trend will continue and shift onto the end user as companies seek solutions that are simple and require little to no oversight or maintenance over flashy, complicated tools. 

Additionally, I predict overworked IT workers will increasingly turn to AI tools in 2026, which can help to offload and automate some of the more manual work but could also have unintended consequences.

Risks Associated with AI Tools

As AI becomes more integrated into business operations, it sometimes brings unexpected outcomes, such as the Replit incident where an AI assistant deleted an entire production database. In 2026, organizations will further tighten administrative controls and prioritize backup storage solutions that offer zero trust and absolute immutability. This combination ensures backup data is fully protected from the moment it’s created, eliminating the risk of accidental or malicious deletion – even by privileged users or AI tools.

This approach will expand beyond businesses’ internal systems to the organizations that work with them as they seek to secure their entire digital environment to avoid compromise via a third-party breach or attack.

Shifting Cyber Insurance Policies

Both insurers and their customers will become increasingly focused on whether companies can successfully recover from attacks, rather than just trying to evade them. Therefore, cyber insurers will shift from prevention-based coverage to resilience-based coverage in 2026. Ransomware will continue to target backups, so some insurers will start to require proof of absolutely immutable, on-premises backup systems for coverage. These reduce exposure significantly by protecting backup data during an attack and enabling quick and reliable restoration to ensure business continuity. 

According to the survey I cited earlier, 74% of IT/cyber professionals said their data recovery tools are too complex to be used without security expertise, a challenge that adds to their workplace stress. Sixty-seven percent believe faster, higher-performing backup solutions that minimize downtime, and using tech independently tested by credible third parties, would significantly boost productivity and confidence in responding to cyberattacks. In 2026, employers and cyber insurers alike will adjust to the rising pressures brought on by AI and sophisticated cyber threats by leaning on these technologies.

## 

ABOUT THE AUTHOR 

David Bennett 

Object First CEO David Bennett is a tech veteran and seasoned channel executive with more than 30 years of IT channel leadership. Before joining Object First, he was CEO of Axcient and chief revenue officer at Webroot. Bennett has also held international leadership roles within such companies as Lenovo, Sony, and Kingston. British-born, he now resides in Colorado with his wife and family.