Fastly warns of serious cybersecurity problems for television and production companies focused on AI

The latest Global Security Research Report from Fastly states that companies in the media and entertainment that adopt an “AI-First” philosophy (those that integrate AI into their key processes and offerings) are heading into a cybersecurity crisis by not modernizing their security at the pace they are turning to generative tools.

According to transfer Fastly, these types of companies take an average of more than six months fully recover from security incidents, which means 43 more days that companies that do not identify themselves as AI-first. The implications of this delay, they emphasize, are “critical in the current economy.”

He 41% of organizations AI-first states that AI was directly exploited in its security incident most recent, compared to only 7% of those that do not prioritize this technology. These findings highlight how the systems AI-native expand the attack surface potential, introducing new layers such as agentic workflows (agent-based workflows) and decentralized data flows, which significantly complicates defense.

On the other hand, almost half (44%) of organizations AI-first point out that the use of AI caused an oversight or blind spot regarding security that contributed to their last incident, compared to 38% of non-organizations AI-first. This points to a growing challenge in terms of visibility, control and enforcement of AI use policies. According to Marshall Erwin, CISO at Fastly, it is necessary to “secure AI and inference infrastructure, monitor and limit the activity of unwanted AI crawlers, anticipate the rise of Shadow AI and reinforce the outer perimeter.”

The question of AI scraping

Practices like AI scraping (the use of AI to automate, adapt and extract data from web pages) are adding costs and complexity to infrastructures that are already stretched, causing operational disruptions and driving spending into six figures: "The challenge is no longer limited to malicious actors and isolated incidents. It is now about managing a rapidly and often invisibly growing infrastructure footprint.

To respond to these challenges, organizations are investing heavily in security tools designed for this new era. The agentic discoverability (64%), los Web Application Firewalls (WAF) (58%) and the API security (56%) have emerged as the main areas of investment. However, the answer is still incomplete: almost three out of four (74%) respondents are concerned about attacks DDoS aimed at AI agents, and the 60% recognizes that you need AI-specific security experts to defend your systems effectively.

"From unmonitored agent activity to escalating scraping costs, the risks are real, both operationally and commercially. As a result, Web Application and API Protection (WAAP) “They are becoming business-critical solutions, providing the visibility and control essential to ensuring innovation at the edge,” concludes Erwin.

The full report is available here.