AI Revolution: Netscout Transforms Cybersecurity at MWC25 Summit
Summary
- AI Across Security Products: Netscout used MWC25 in Barcelona to explain how it is adding AI and automation to its security and service assurance tools.
- Telecom Industry Focus: The company’s main customers are mobile operators and other service providers.
- Shared Threat Data: More than 500 service providers feed Netscout data about the threats they see, which it turns into threat intelligence.
- Faster Response: Automation is meant to cut the time operators spend analyzing attacks and changing mitigations.
- Industry Impact: The pitch is less manual work and faster recovery when an attack or outage hits.
AI for Telecom Security
Telecom networks carry everyone else’s traffic, so attacks on them hit far beyond one company. At MWC Barcelona 2025, Netscout laid out how it is using AI to help operators run and defend those networks. Its main focus is cutting the workload for security and operations teams.
Netscout’s CTO for Security, Darren Anstee, said the company is extending AI and automation into its security products through new kinds of threat intelligence and new features. The goal is to reduce operational overhead for customers while speeding up threat response. On the service assurance side, the company promoted Omnis AI Insights, which uses AI on curated packet data to surface the main problem and the root cause behind it.
Why Telecom Is Different
Service providers face a particular problem. Distributed denial-of-service (DDoS) attacks now change during the attack itself, mixing several vectors at once. An operator may block one wave, then have to change its configuration five minutes later when the attack shifts.
Start your morning with the signal that matters.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
Scale makes it harder. When a nation-state-linked group targets several organizations at once, a provider may be fighting the same campaign across many customers in parallel. Each change multiplies the work.
Threat Intelligence From Providers
Netscout’s security strategy leans on data. Anstee said more than 500 service providers send Netscout information every hour about their view of the internet and the threats they detect. Netscout refines that into threat intelligence and sends it back to customers every three hours, so they can see where attacks are coming from and act earlier.
Anstee summed up the demand: “What customers fundamentally want is more automated capability, which leads to faster response.” In his view, time to respond is everything, whether the problem is an outage or an attack.
Automation Against Shifting Attacks
The company says it is building AI into its products to analyze attack traffic and automate configuration changes. Operators spend less time on analysis and repeated mitigation work. They get the data they need faster.
Speed is the point. Attacks that change mid-stream punish slow, manual responses, and service providers rarely have spare staff.
What It Means for the Industry
Netscout is one of many vendors adding AI to network security, but its telecom focus matters. Service providers see huge volumes of traffic, which makes them good candidates for automated analysis.
Start your morning with the signal that matters.
Weekday mornings. Five minutes. What changed in security, why it matters.
By subscribing you agree to our Privacy Policy.
Free. Weekday mornings. 5 minutes or less.
The broader trend is clear across the industry: AI is being used less as a headline feature and more to cut routine work for overstretched teams. Netscout’s message at MWC25 fit that pattern.
The Takeaway
Netscout’s MWC25 message was practical. Use AI to turn large amounts of network data into faster answers and fewer manual steps.
Whether it delivers will show up in how quickly operators can detect and stop attacks. For telecom networks that carry everyone else’s traffic, minutes matter.
Newer CyberExperts coverage on this topic
This article still works as background. If you want the current picture, start with the freshest related coverage below and today's brief.
Citrix NetScaler CVE-2026-19490: The Auth Bypass That Went From PoC to Probes in a Day
CVE-2026-19490 is a CVSS 9.3 NetScaler Gateway/AAA auth bypass. A public PoC on Sept 2 was followed by live probes within a...
PaperCut NG/MF: The Print Server That Learned Remote Code Execution Again
CVE-2026-81578 and CVE-2026-82078 chain to pre-auth RCE on PaperCut Application Server. Confirm Emergency Patch Release 2, restrict admin exposure, and hunt like...
JFrog Artifactory CVE-2026-82329: Empty Join Key, Full Admin Token, Busy Scanners
CVE-2026-82329 lets attackers forge Artifactory admin tokens via a deterministic empty join key. Mass scanning peaked near 406,000 attempts; patch fixed builds...
Friday’s brief: Apache’s HTTP/2 fix, then Check Point break-ins, a ScreenConnect add-on and a GitHub secret stealer
The fastest way to catch up on what changed after this article was published.
Start your morning with the signal that matters.
Get the biggest cybersecurity developments, why they matter, and where to go deeper on CyberExperts.
By subscribing you agree to our Privacy Policy.
Free. Weekdays. Built for operators.