Get your free personalized podcast brief

We scan new podcasts and send you the top 5 insights daily.

Historically, sophisticated nation-state hackers restricted targeting to highly selective, stealthy, sniper-like intrusions for intelligence gathering. AI changes the military and espionage doctrine toward noisy, comprehensive 'drone swarms' that burn tokens to exhaustively penetrate defenses. Furthermore, this dynamic equalizes the playing field, allowing unsophisticated threat actors to execute high-volume, highly complex attacks that make attribution between criminal groups and nation-states nearly impossible.

Related Insights

Warfare has evolved to a "sixth domain" where cyber becomes physical. Mass drone swarms act like a distributed software attack, requiring one-to-many defense systems analogous to antivirus software, rather than traditional one-missile-per-target defenses which cannot scale.

The biggest shift from AI in cyber warfare won't be at the top. While tier-one nations see efficiency gains, the most dramatic impact will be for second-tier countries and non-state actors. These groups can now acquire advanced capabilities without the decades-long investment in human talent, leveling the playing field.

AI levels the playing field for cyber attackers globally. It provides them with perfect English for social engineering, expert-level coding abilities for finding vulnerabilities, and effectively 'unlimited manpower' through automation. This combination leads to a significant increase in the volume and sophistication of attacks.

AI acts as a great leveler in cyber warfare, promoting all actors to a higher tier of capability. Mid-level state actors like Iran can now execute attacks previously only possible for top players like Russia or China, and individual criminal groups gain the power of small states.

While many fear AI will enable a "cyber Pearl Harbor," the evolution of drone warfare serves as a cautionary tale. Initially seen as an offensive tool, drones became a defense-dominant technology. Similarly, advanced AI could be used to create powerful agentic defenses, neutralizing offensive cyber capabilities.

AI tools aren't just lowering the bar for novice hackers; they are making experts more effective, enabling attacks at a greater scale across all stages of the "cyber kill chain." AI is a universal force multiplier for offense, making even powerful reverse engineers shockingly more effective.

AI enables attackers to launch scalable, rapid attacks, overwhelming defenders who are left to manually monitor, validate, and patch vulnerabilities. This dramatically shifts the balance of power, creating a significant strategic disadvantage for cybersecurity teams in a way not seen before.

AI has armed cyber attackers with a new weapon: swarms of coding agents. Unlike human attackers, these agents can exhaustively and rapidly review an entire codebase to find vulnerabilities, dramatically increasing the speed and scale of cyber threats. This necessitates a boom in AI-powered defensive tools.

CrowdStrike CEO George Kurtz posits that AI agents have democratized cyber warfare, making hacktivists and e-crime actors as capable as nation-states. This new "agent state" is the top threat, as it makes sophisticated attacks accessible to anyone with sufficient compute power.

The old security adage was to be better than your neighbor. AI attackers, however, will be numerous and automated, meaning companies can't just be slightly more secure than peers; they need robust defenses against a swarm of simultaneous threats.