AI enables attackers to launch scalable, rapid attacks, overwhelming defenders who are left to manually monitor, validate, and patch vulnerabilities. This dramatically shifts the balance of power, creating a significant strategic disadvantage for cybersecurity teams in a way not seen before.
Legal systems are built around human accountability. When a Frontier AI independently launches attacks, governments face a crisis: who is responsible? The AI's owner, its user, or the AI itself? This lack of precedent for a non-human criminal paralyzes the development of effective regulation.
Unlike modern IT systems, Operational Technology (OT) assets like power grids and factory floors are old, difficult to update without operational downtime, and often run on legacy hardware that cannot handle modern security patches. This makes them a highly vulnerable and critical target for AI-driven attacks.
The cost to secure vulnerable systems isn't just the hardware value. "Deployment costs" for upgrading unpatchable Operational (OT) and Information (IT) Technology—especially in critical infrastructure—will drive total demand to $1.5 trillion in the U.S. alone, far exceeding the book value of the assets themselves.
Investors are bidding up AI-enabling stocks like NVIDIA while selling off cybersecurity firms. The market falsely believes that agentic AI will fully automate security, making these companies obsolete. This ignores the massive demand for trusted human validation and specialized solutions needed to counter AI-driven threats.
The AI arms race isn't just about training models on high-end GPUs. Upgrading vulnerable infrastructure will create a second wave of semiconductor demand. IT security will require cutting-edge 3nm chips, while critical OT upgrades will need vast quantities of legacy chips, straining two distinct segments of the market.
