Presumably now we also have exploits written by AI, so I guess security has to be one-upped now?

Not that I expect companies to be more proactive now. I have been disillusioned of that long ago. With AI they could be at least a little bit more proactive, which I guess is a great selling point of AI to corporate.