Artificial intelligence (AI) is taking on new dimensions, especially within the ever-evolving world of cybersecurity. Both companies trying to protect their digital realms and hackers seeking to exploit vulnerabilities are increasingly leveraging AI tools to achieve their goals. According to recent reports, the global market for AI-driven cybersecurity solutions is expected to skyrocket—from around $14.9 billion last year to approximately $133.8 billion by 2030. With countless assets online and threats multiplying, the stakes have never been higher.
It’s tempting to assume AI is merely the next big thing to protect sensitive data, but it’s more of a double-edged sword. For every beneficial use of AI to bolster cybersecurity, there’s also the risk of hackers using the same technology for malicious purposes. Collin R. Walke, head of the cybersecurity and data privacy practice at Hall Estill law firm, emphasizes how “cyber vulnerabilities are becoming democratized,” meaning the skills and tools once reserved for highly-trained professionals are now accessible to anyone with internet access.
The convergence of these dynamics creates what could be described as the new battlefield of cyberspace. Hackers are using AI to streamline their operations and maximize the impact of their attacks, all without the need for extensive technical knowledge. Ransomware-as-a-service—where criminals can purchase ready-made ransomware for their operations—makes it easier than ever for would-be hackers to run successful phishing schemes or launch ransomware attacks.
This new breed of phishing emails now has the advantage of sophisticated AI tools, which can generate believable and contextually relevant content, making them harder to detect. Previously, employees might have easily spotted the linguistic slip-ups or vague phrases typical of phishing attempts. Now, the same tools can produce flawless communications, effectively lowering the barrier for novice cyber attackers.
But let's not paint all AI advancements with the same brush; businesses are also utilizing AI to combat these challenges effectively. Many firms are deploying AI systems to prioritize cybersecurity tasks, allowing cybersecurity teams to focus on responding to genuine threats rather than filtering out false alarms. Mark Driver, research vice president at Gartner, highlights this use of AI for “removing false positives,” which can alleviate some pressure on already stretched cybersecurity teams. This not only allows businesses to work smarter but also ensures they can act quickly when real threats emerge.
Yet, focusing solely on the bright side could lead to complacency. While large tech companies such as Amazon, Google, Meta, and Microsoft have come together under pledges to develop AI systems with adequate protections, experts caution against the assumption this will entirely safeguard against vulnerabilities. Michael McNerney, chief security officer at cyber insurance company Resilience, stresses the importance of collective effort within companies and advises against viewing AI as the silver bullet for cybersecurity issues.
AI can, unfortunately, be manipulated to identify vulnerabilities lurking within software systems. Bad actors can employ AI to discern patterns signaling weaknesses, enabling the creation of even more advanced attacks. “When combined with stolen personal information or collected open-source data, AI enables cyber criminals to generate vast numbers of phishing emails or malwares,” Walke explains.
Additionally, AI can create malware with ever-changing signatures, allowing it to evade traditional defenses like firewalls. This is leading industries to adopt the “zero trust” model—essentially establishing layers of verification for everything trying to access their network. Cyber criminals with more advanced resources, perhaps from nation-states, pose significant concerns. They may use their access to top-tier AI experts and resources, leaving organizations struggling to keep up with sophisticated AI-driven threats.
Businesses aren’t alone, though. The same AI tools enhancing attacks can also provide companies the means to develop more secure environments. AI can significantly accelerate the process of scanning code for vulnerabilities or assessing vast networks, making it easier for cyber risk managers to maintain awareness of their digital footprint. With the rapid rise of remote work and increased reliance on cloud-based services, AI is set to help organizations adapt effectively to these new operational modalities.
Still, caution is warranted. The balance between man and machine remains critical, and AI should be viewed more as an assistant to human experts rather than a complete replacement. While AI can assist by making sense of immense amounts of data, experts believe human analysts will continue to play irreplaceable roles within cybersecurity frameworks.
Despite the integration of AI, the occurrence of breaches and cybersecurity incidents continues to rise, prompting organizations to explore why traditional defenses sometimes fail. Recently, OpenAI itself faced scrutiny following security breaches—a stark reminder of just how vulnerable even the most advanced companies can be.
What lies on the horizon is unclear. The technology is still largely being defined and will undergo various iterations as it develops. Experts remain cautious yet hopeful; the technology’s potential to streamline defenses and bolster cybersecurity seems promising. But with new threats rising alongside these advancements, companies must remain vigilant.
For the foreseeable future, the best defense against AI-fueled threats may lie within a unified approach across organizations—where chief information security officers (CISOs), corporate boards, and legal teams all contribute to discussions surrounding AI and its risk management strategies.
So, where does this leave the average person? It’s clear we’re entering uncharted territory. Much of the public remains unaware of just how advanced cybersecurity tools are becoming or how vulnerable they might be to shifting tactics employed by criminal elements. Both businesses and consumers will need to embrace the need for education around these tools and remain entities committed to fostering cybersecurity awareness.
Cybersecurity and AI are likely to continue evolving hand-in-hand, making this battleground one to watch closely. Both sides are recognizing the capabilities inherent within AI. Organizations will need to stay agile and mindful of how technology can empower both defenders and attackers alike. This is not just the tech industry’s problem; it will require collaboration and trust-building among organizations to weather storms posed by the new weapons being forged within the digital space.
