AI-Fueled Cyber Threats Escalate: Security Experts Struggle to Adapt

By Frank Jones, CISSP   Published: 05/02/25   Updated: 10/24/26   3 min read

AI-Fueled Cyber Threats Escalate: Security Experts Struggle to Adapt

At a glance

Attackers put AI to work

Criminals are making AI part of their toolkit. Machine learning makes their attacks more effective, and AI lets a small crew automate password cracking, write fluent phishing emails in a dozen languages and probe thousands of targets at once, work that used to take a much larger team.

Older security systems often can’t adapt quickly enough. Teams are under pressure.

An arms race

AI is moving fast, and it has set off an arms race. It helps attackers, and it helps defenders. New AI tools aim to predict and block threats before they can exploit weaknesses.

AI-driven anomaly detection, for example, is becoming a standard way to spot suspicious activity. These tools need constant tuning and monitoring to stay ahead of criminals. The edge will go to defenders who learn to use AI well before attackers find new tricks.

Who is investing

Google, IBM and Microsoft are investing heavily in AI for security, building defenses that can work at scale. OpenAI, the AI research company, studies how its models could be used for both attack and defense, which shows how delicate the ethics of this work can be.

Startups are entering the field too.

Where AI falls short

AI in security has limits. Relying too heavily on AI tools is risky, because the models themselves can be attacked and fooled. Because the technology is so new, ethical and operational rules need regular review to prevent misuse.

Rules for using AI will have to keep changing as the technology does, so organizations get the benefits while limiting the harm.

Working together

No single organization can handle AI-driven threats alone, so government and industry have to cooperate. That means sharing threat intelligence, being open about incidents and funding joint research. National cybersecurity task forces also help coordinate responses to major incidents.

What defenders should do next

AI is changing both attack and defense. The outcome will depend on new technology and on cooperation, and every organization has a part to play.

Stay Current

Newer CyberExperts coverage on this topic

This article still works as background. If you want the current picture, start with the freshest related coverage below and today's brief.

Latest Daily Brief

Friday’s brief: GitLab’s 10.0 fix, then VeloCloud attacks, a poisoned LiteLLM release and PHP2Shell logs to check

The fastest way to catch up on what changed after this article was published.

Read Today's Brief

Frank Jones, CISSP

Frank Jones has loved computers from the age of 13. Frank got his hacking career started when he downloaded a war dialing program that he used to detect dial up modems in his hometown of Chicago. Frank Jones now works as a JAVA coder and cyber security researcher.