The cybersecurity arms race just got an upgrade: AI is now helping both sides move faster. Defenders are…
samuel watua Soita — Full Stack Software Engineer
The cybersecurity arms race just got an upgrade: AI is now helping both sides move faster.
Defenders are using AI to analyze telemetry, hunt threats and discover vulnerabilities.
Attackers are increasingly using AI to accelerate reconnaissance, vulnerability exploitation and other parts of their operations.
Microsoft recently reported an AI-driven campaign in which the threat actor Storm-0940 used agentic AI technology in a ConnectWise supply-chain compromise.
Google Threat Intelligence has also documented the evolution of adversarial AI from simple prompting toward increasingly autonomous activity.
That changes one fundamental variable in cybersecurity:
Speed.
An attacker who previously needed hours of manual work may automate parts of the process.
A defender who previously needed hours to investigate thousands of events can also automate parts of the investigation.
So the question isn't:
“Will AI be used in cybersecurity?”
It already is.
The more important question is:
Who is building the better security workflows around it?
The organizations that win this race won't necessarily be the ones with the most AI.
They'll be the ones that combine:
AI + human judgment + quality telemetry + strong security controls.
Because automation without judgment can simply make mistakes happen faster.
#Cybersecurity #AI #ThreatIntelligence #CyberDefense #AgenticAI #SOC #SecurityEngineering #AIsecurity #InfoSec
0 reactions · 0 comments
Topics: #agenticai, #securityengineering, #ai, #infosec, #threatintelligence, #cyberdefense, #aisecurity, #cybersecurity, #soc