AI-generated malware that evades detection may already be accessible to nation states, posing a significant cybersecurity threat. This powerful software could be created by training an AI model on exploit data to generate new code that bypasses current security measures.
The UK’s National Cyber Security Centre (NCSC) believes that highly capable states may possess repositories of malware large enough to effectively train AI models for malicious purposes, highlighting the potential for widespread use of AI-generated cyber threats.
AI is expected to enhance existing cyber threats rather than transform the risk landscape in the near term. The NCSC warns that AI will heighten the global ransomware threat, improve victim targeting, and lower the barrier for cybercriminals.