The biggest shift from AI in cyber warfare won't be at the top. While tier-one nations see efficiency gains, the most dramatic impact will be for second-tier countries and non-state actors. These groups can now acquire advanced capabilities without the decades-long investment in human talent, leveling the playing field.

AI levels the playing field for cyber attackers globally. It provides them with perfect English for social engineering, expert-level coding abilities for finding vulnerabilities, and effectively 'unlimited manpower' through automation. This combination leads to a significant increase in the volume and sophistication of attacks.

A key threshold in AI-driven hacking has been crossed. Models can now autonomously chain multiple, distinct vulnerabilities together to execute complex, multi-step attacks—a capability they lacked just months ago. This significantly increases their potential as offensive cyber weapons.

The most urgent AI cyber threat isn't from contained models at OpenAI. It's from powerful, openly available Chinese models (like GLM 5.3) being fine-tuned by small criminal groups, giving them offensive capabilities previously exclusive to nation-states.

AI tools aren't just lowering the bar for novice hackers; they are making experts more effective, enabling attacks at a greater scale across all stages of the "cyber kill chain." AI is a universal force multiplier for offense, making even powerful reverse engineers shockingly more effective.

Anthropic's new AI, Claude Mythos, can find software vulnerabilities better than all but the most elite human hackers. This technology effectively gives previously unsophisticated actors the cyber capabilities of a nation-state, posing a significant national security risk.

AI enables attackers to launch scalable, rapid attacks, overwhelming defenders who are left to manually monitor, validate, and patch vulnerabilities. This dramatically shifts the balance of power, creating a significant strategic disadvantage for cybersecurity teams in a way not seen before.

Initial fears around Chinese open-source AI focused on backdoors or censorship. The current, more serious concern is that these models provide powerful, accessible tools for offensive cyberattacks, enabling a wider range of malicious actors to hack any system.

Cybersecurity expert Gili Raanan highlights a critical risk: threat actors can adopt new AI tools much faster than large, slow-moving enterprises. This creates an asymmetric battlefield where defenders are outpaced, putting AI's power in the hands of bad actors first.