The Apollo Wake-Up Call And The AI Arms Race
To truly understand why companies keep shovelling money into their security budgets, you need only look at what happened to Apollo Global Management.
Apollo manages approximately 650 billion dollars in assets. They are resourced, sophisticated, and incredibly powerful. Yet, they still suffered a significant data breach. The incident served as a chilling public reminder that no organisation, regardless of its size or pedigree, is immune to a porous perimeter.
For the vendors selling digital locks and keys, Apollo's misfortune is effectively a sales pitch that writes itself.
Every single corporate breach that makes the evening news materially shortens the sales cycle for the next contract renewal. Chief information security officers do not need to construct elaborate internal presentations to justify their spending after an event like that. The board of directors makes the case for them, usually out of sheer panic.
There is a second, far more structural driver at play here. Artificial intelligence tools have dramatically lowered the barrier to entry for threat actors.
A few years ago, executing a convincing phishing attack required a degree of social engineering skill and at least a basic grasp of grammar. Today, flawless, highly targeted attacks can be generated at an industrial scale using large language models. Malware can be adapted in real-time. The corporate attack surface is expanding vastly faster than most legacy systems can possibly defend against it.
This creates a compounding dynamic that specifically benefits modern, cloud-native security platforms. The companies best positioned to respond to AI-powered threats are those that actually use AI themselves, natively, right at the detection layer. For companies like CrowdStrike or Palo Alto Networks, that is not some vague future ambition. It is the core plumbing of their current product architecture.
Cybersecurity has quietly become a completely non-discretionary expense. When a company is looking for budgets to cut in a difficult macroeconomic quarter, the security line item is aggressively protected by legal liability, regulatory obligations, and the terrifying memory of what happened to the last firm that decided to skimp on their firewalls.