India leads the APJ Region in Enterprise AI/ML Usage, Ranks Second Globally: Zscaler ThreatLabz 2026 AI Security Report
Bangalore, February 2026 –Rapid AI adoption in India creates a critical
security gap between innovation and security, requiring organizations to adopt
an AI security platform built on Zero Trust
News Highlights
- India
logged 82.3B AI/ML transactions (June–December 2025), ranking #2 globally,
and accounting for 46.2% of AI/ML transactions among APAC countries.
- In
India, AI/ML transaction volume is led by Technology & Communication,
Manufacturing, Services, and Finance & Insurance.
- Globally, the report highlights a 91% year-over-year increase in AI/ML activity, a 93% surge in data transfers to AI/ML applications (over 18,000 TB), and that most enterprise AI systems could be compromised in a median time of 16 minutes.
Zscaler, Inc. (NASDAQ: ZS),
the leader in cloud security, today released the findings of the ThreatLabz
2026 AI Security Report, warning that enterprises are unprepared for the next
wave of AI-driven cyber risk, even as AI becomes embedded in business
operations. Based on an analysis of nearly one trillion AI/ML transactions
across the Zscaler Zero Trust Exchange™ platform between January and December
of 2025, the research shows that enterprises are reaching a tipping point where
AI has transitioned from a productivity tool to a primary vector for
autonomous, machine-speed conflict. The report analyzes AI and ML traffic
together because enterprise AI systems rely on machine learning models to
operate at scale.
“AI is no longer just a productivity tool but
a primary vector for autonomous, machine-speed attacks by both crimeware and
nation-state,” said Deepen Desai, EVP Cybersecurity at Zscaler. “In the
age of Agentic AI, an intrusion can move from discovery to lateral movement to
data theft in minutes, rendering traditional defenses obsolete. To win this
race, organizations must fight AI with AI by deploying an intelligent Zero
Trust architecture that shuts down the potential paths for the attackers of all
kinds.”
AI in the Enterprise: Emerging Trends and
Security Issues from the 2026 Report
Indian enterprises generated 82.3 billion
AI/ML transactions between June and December 2025, ranking second globally
after the US. Among APAC countries, India ranked first, accounting for 46.2% of
AI/ML transactions over the same period, alongside a 309.9% year-over-year
growth in AI/ML activity. Japan recorded 18.6 billion AI/ML transactions with
122.8% year-over-year growth, while Australia recorded 15.3 billion AI/ML
transactions with 104.1% year-over-year growth.
AI Adoption is Outpacing Oversight
AI usage now spans every business function,
yet in many sectors, adoption is scaling faster than the C-suite can manage. In
India, AI/ML activity is concentrated in Technology & Communication (31.3
billion transactions), Manufacturing (15.7 billion), Services (12.6 billion),
and Finance & Insurance (12.2 billion), underscoring how rapidly AI is
becoming embedded across core sectors. Despite this momentum, the report
signals a critical gap: many organizations still lack a basic inventory of
active AI models and embedded features, leaving them unaware of exactly where
sensitive data is exposed.
“India’s scale of enterprise AI adoption is accelerating faster than most organizations’ ability to govern it,” said Suvabrata Sinha, CISO-in-Residence, India at Zscaler. “With AI now embedded in everyday business applications and workflows, the security priority for Indian enterprises is clear: understand where AI is being used, inspect the data being shared, and enforce the right controls consistently. A zero-trust approach with strong data protection and continuous visibility is essential to secure AI-driven transformation at the speed the market now demands.”
As Agentic AI Looms, 100% of Enterprise AI
Systems Found Vulnerable to Breach at Machine Speed
While AI security discussions often focus on
hypothetical future threats, Zscaler’s red team testing revealed a more
immediate reality: when enterprise AI systems are tested under real adversarial
conditions, they break almost immediately. In controlled scans, critical
vulnerabilities surfaced in minutes, not hours. The median time to first
critical failure was just 16 minutes, with 90% of systems compromised in under
90 minutes. In the most extreme case, the defense was bypassed in a single
second.
As more evidence of AI-driven attacks by
cybercriminals and nation-state espionage groups is uncovered, ThreatLabz warns
autonomous and semi-autonomous “agentic” AI will increasingly automate
cyberattacks, with AI agents assuming responsibility for reconnaissance,
exploitation, and lateral movement. Defenders must assume that attacks can
scale and adapt at machine speed, not human speed.
AI Usage Surges 4x, Fueling New Enterprise
Supply Chain Vulnerabilities
ThreatLabz found AI/ML activity increased 91%
year-over-year across an ecosystem of more than 3,400 applications. This rapid
adoption has left many organizations with no clear map of the AI models
interacting with their data or the supply chains behind them. ThreatLabz warns
that this AI supply chain is now a primary target, as weaknesses in common
model files allow attackers to move laterally into core business systems.
Unmanaged Embedded AI Creates Critical Data
Exposure Risks
An enormous volume of activity is happening
on “standalone AI” such as ChatGPT, which logged 115 billion transactions in
2025 and Codeium, which logged 42 billion transactions. “Embedded AI,” AI
capabilities built directly into everyday enterprise SaaS applications and
platforms, have become one of the fastest growing sources of unmanaged risk.
Because these features are often active by default and escape detection by
legacy security filters, they create a back door for sensitive corporate data
to flow into AI models without oversight. Among all platforms analyzed,
Atlassian was a leading source of embedded AI activity, reflecting widespread
use of AI-powered features within its core platforms, such as Jira and
Confluence.
18,000 TB of Data Poured into AI: A New
Target for Machine-Speed Attacks
In 2025, enterprise data transfers to AI/ML
applications surged to 18,033 terabytes (TB)—a 93% year-over-year increase and
roughly equivalent to 3.6 billion digital photos. The massive influx has
transformed tools like Grammarly (3,615 TB) and ChatGPT (2,021 TB) into the
world’s most concentrated repositories of corporate intelligence.
The scale of this risk is quantified by 410
million Data Loss Prevention (DLP) policy violations tied to ChatGPT alone,
including attempts to share Social Security numbers, source code, and medical
records. These findings signal that AI governance has transitioned from a
policy discussion to an immediate operational necessity. ThreatLabz warns that
as these repositories grow, they are becoming high-priority targets for cyber
espionage.
Modernize AI security with Zero Trust
Legacy firewalls and VPNs fail in dynamic AI
environments, creating visibility gaps and security blind spots. Zscaler
replaces this complexity with AI-native security, providing the real-time
visibility and guardrails needed to innovate safely.
The Zscaler Zero Trust Exchange helps
organizations stay ahead of AI-powered threats by:
- Eliminating
Attack Surfaces: Enforce continuous verification and
least-privileged access.
- Blocking
AI Threats: Inspect all traffic, including encrypted
data, to stop threats in real time.
- Protecting
Data Everywhere: Automatically discover and classify
sensitive data across all environments.
- Neutralizing
Lateral Movement: Use AI-powered segmentation to contain
attackers.
- Optimizing
Responses: Leverage predictive AI to accelerate
security operations and posture management.
Master the new rules of AI security and
download the full report
Rapidly accelerating AI adoption demands a
new approach to protection. To stay ahead of evolving risks, download the full ThreatLabz 2026 AI Security Report
for comprehensive threat analysis and actionable best practices.
Follow Zscaler on LinkedIn, X, and Instagram.
Research Methodology
The report draws on an analysis of 989.3
billion AI/ML transactions generated by ~9K organizations across the Zscaler
Zero Trust Exchange™ from January 2025–December 2025, providing a grounded view
into how AI is actually being used (and restricted) across global environments.
About Zscaler
Zscaler (NASDAQ: ZS) is a pioneer and global
leader in zero trust security. The world’s largest businesses, critical
infrastructure organizations, and government agencies rely on Zscaler to secure
users, branches, applications, data & devices, and to accelerate digital
transformation initiatives. Distributed across 160+ data centers globally, the
Zscaler Zero Trust Exchange™ platform combined with advanced AI combats
billions of cyber threats and policy violations every day and unlocks
productivity gains for modern enterprises by reducing costs and complexity.

