Because software code is a language, LLMs are becoming superhuman coders. This makes them incredibly effective at finding system vulnerabilities for hacking (offense). However, this exact same capability makes them equally powerful for identifying and fixing those flaws (defense), leading to a rapid escalation in cybersecurity.

The cybersecurity landscape is now a direct competition between automated AI systems. Attackers use AI to scale personalized attacks, while defenders must deploy their own AI stacks that leverage internal data access to monitor, self-attack, and patch vulnerabilities in real-time.

The same AI models that can exploit system vulnerabilities are also the most effective tools for identifying and fixing those weaknesses. This duality creates a policy paradox: restricting the technology to prevent its misuse as a weapon also prevents its use as a defensive shield, leaving systems vulnerable.

The sophistication of attacks like the Axios NPM compromise necessitates a shift to AI-driven defense. Tools like Cognition's Devin Review are reportedly catching malware before public disclosure, indicating that organizations must adopt AI security tools to counter the rising threat of automated, AI-powered attacks.

The greatest cybersecurity risk is not powerful AI, but an imbalance where attackers possess capabilities that defenders lack. Open-sourcing models ensures defensive tools can evolve alongside offensive ones, creating a more resilient ecosystem. It empowers defenders to react faster and make the entire system safer for everyone.

The long-term trajectory for AI in cybersecurity might heavily favor defenders. If AI-powered vulnerability scanners become powerful enough to be integrated into coding environments, they could prevent insecure code from ever being deployed, creating a "defense-dominant" world.

The old security adage was to be better than your neighbor. AI attackers, however, will be numerous and automated, meaning companies can't just be slightly more secure than peers; they need robust defenses against a swarm of simultaneous threats.

Adversaries are using AI to create an "asymptotic attack pressure" with novel exploits moving at machine speed. Traditional human-speed defense is insufficient. The solution is an autonomous defensive system that mirrors the attackers, creating a corresponding counter-pressure to analyze threats and respond in real-time.

While AI will increase cyber risk by enabling faster vulnerability scanning and generating potentially insecure code, it will also be the solution. AI agents will be needed to review code and defend systems, creating a massive new market for "agentic security" companies.