Ai's impact on cybersecurity: shift from defenders to attackers

Unit 42, a division of Palo Alto Networks, has raised alarms about the significant shift in cybersecurity dynamics due to the rise of artificial intelligence. Sam Rubin, senior vice president of Unit 42, emphasized that this represents a generational change in the field, as AI capabilities have disrupted the previous balance between security and exposure. He noted that frontier AI models enable attackers to identify and exploit network vulnerabilities at unprecedented speeds, which traditional defenses were not designed to handle. Organizations are struggling to detect and respond to these rapid attacks effectively. Rubin highlighted that the capabilities demonstrated by readily available agentic AI models, as well as those still restricted for defensive use, have shifted the balance of power from defenders to attackers. This shift was anticipated by Unit 42 in April, when Anthropic, in collaboration with Palo Alto Networks and other major technology companies, launched Project Glasswing to address security issues in its Mythos model. Unit 42 estimated that these capabilities would be accessible to attackers within a year, and five months later, early signs of this threat are already emerging in the wild. Unit 42 is currently investigating an attack on one of its customers, where an attacker used an agentic framework to exploit 50 applications and other weaknesses across an enterprise in less than 10 hours. Rubin estimates that AI enabled the attacker to accomplish what would have taken at least 10 days in a pre-AI era. Sherrod DeGrippo, vice president of threat intelligence at Unit 42, added that attackers are already leveraging AI across the entire attack chain, with the potential for fully agentic attacks in the near future. DeGrippo outlined four key areas where the threat landscape is shifting: AI acts as a force multiplier, identity has become the primary vector for compromise, attackers are infiltrating foundational libraries and software supply chains, and nation-sponsored threat groups are gaining insights into enterprise system vulnerabilities. She stressed that no organization is fully prepared for the challenges ahead, and this is a transformative period that will determine the fate of many businesses.