AI levels the playing field for cyber attackers globally. It provides them with perfect English for social engineering, expert-level coding abilities for finding vulnerabilities, and effectively 'unlimited manpower' through automation. This combination leads to a significant increase in the volume and sophistication of attacks.

While many fear AI will enable a "cyber Pearl Harbor," the evolution of drone warfare serves as a cautionary tale. Initially seen as an offensive tool, drones became a defense-dominant technology. Similarly, advanced AI could be used to create powerful agentic defenses, neutralizing offensive cyber capabilities.

AI tools aren't just lowering the bar for novice hackers; they are making experts more effective, enabling attacks at a greater scale across all stages of the "cyber kill chain." AI is a universal force multiplier for offense, making even powerful reverse engineers shockingly more effective.

Contrary to the focus on offensive AI, its greatest impact to date has been on defense. AI tools are being used to find and fix thousands of software vulnerabilities before release. They also enable network monitoring at a scale impossible for human teams, suggesting AI is currently a "defense dominant" technology.

AI enables attackers to launch scalable, rapid attacks, overwhelming defenders who are left to manually monitor, validate, and patch vulnerabilities. This dramatically shifts the balance of power, creating a significant strategic disadvantage for cybersecurity teams in a way not seen before.

The cybersecurity landscape is now a direct competition between automated AI systems. Attackers use AI to scale personalized attacks, while defenders must deploy their own AI stacks that leverage internal data access to monitor, self-attack, and patch vulnerabilities in real-time.

Cybersecurity expert Gili Raanan highlights a critical risk: threat actors can adopt new AI tools much faster than large, slow-moving enterprises. This creates an asymmetric battlefield where defenders are outpaced, putting AI's power in the hands of bad actors first.

CrowdStrike CEO George Kurtz posits that AI agents have democratized cyber warfare, making hacktivists and e-crime actors as capable as nation-states. This new "agent state" is the top threat, as it makes sophisticated attacks accessible to anyone with sufficient compute power.

The long-term trajectory for AI in cybersecurity might heavily favor defenders. If AI-powered vulnerability scanners become powerful enough to be integrated into coding environments, they could prevent insecure code from ever being deployed, creating a "defense-dominant" world.