BeyondTrust predicts the rise of AI veganism, digital tariffs, and identity security challenges in agentic AI and hybrid cloud growth.

Agentic AI will appear as the most effective attack vector because of the risk for new vulnerabilities caused by quick operations and poor oversight, in 2026. This was one of BeyondTrust's cybersecurity predictions for 2026. According to the global identity security company, a rising number of individuals and companies will decide not to use AI at all due to legal, environmental, and privacy concerns.

This change, named as the AI Veganism movement, may encourage companies to provide alternative choices and increased transparency in AI-based processes and products. BeyondTrust also predicts that governments will start charging taxes or regulations on worldwide digital services, introducing digital tariffs that encourage regional innovation and change international data flows, since privacy is still the main concern in AI.

Companies are using premises infrastructure and the cloud to operate their AI workloads, though, as data continues to grow. Morey J. Haber, Chief Security Advisor of BeyondTrust, anticipates challenges with this hybrid multi-cloud network.

Haber specifies that while these are worldwide predictions, the APAC region may be at their center. Even while there are still a lot of major cloud migrations happening both locally and internationally, it is still difficult for companies to fully understand identity risk across that new hybrid multi-cloud infrastructure.

Many of the companies that are speaking on this cloud journey are looking to grow quickly, so they're really trying to figure out how to limit and regulate identities. These are the identity risks that come with growing into the cloud and some of the possible issues in those IDPs. Onboarding customers are also considering the dangers and difficulties associated with using agentic AI. As a result, many of these giant digital transformation initiatives are creating an important need for identity security and limited access.