An interview with Cognition CISO Alex Stamos on how AI is upending cybersecurity, AI-powered red teaming, vulnerabilities in legacy codebases, and more

The cost of large-scale cyber defense is set to skyrocket as AI-powered attacks become routine.

Cybersecurity expert Alex Stamos, CSO of Cognition, warns that the multibillion-dollar cybersecurity industry is ill-equipped for the current wave of AI-enhanced attacks. State and private actors are leveraging AI to detect and exploit vulnerabilities at an unprecedented rate, leading to a string of breaches impacting companies like Fireworks, Cursor, and Binance. This AI-driven capability allows for real-time vulnerability discovery and exploit generation, with tools like ARTEX and open-weight models enabling sophisticated attacks that were previously impossible with readily available resources. Stamos likens the current situation to the early days of the internet in the 1990s, describing it as a "dark age" where the industry scrambles to adapt to this new frontier of cyber threats.

The cybersecurity industry's traditional defense models, built on years of established practices and an economic balance favoring defenders, are being fundamentally disrupted by AI. Tools like ARTEX, powered by advanced language models, allow attackers to automate the entire kill chain, from vulnerability discovery to exploit deployment, in real-time and at scale. This inversion of capabilities means that individual actors with access to powerful hardware and open-source AI models can now mount attacks that were once the exclusive domain of sophisticated state-sponsored groups.

This paradigm shift signals a potential "dark age" for cybersecurity, reminiscent of the early internet's Wild West era. The ease with which AI can be used to find and exploit zero-day vulnerabilities, combined with the economic incentives for malicious actors, creates a volatile landscape. The industry must rapidly develop new AI-native defense strategies and potentially re-evaluate the economics of cybersecurity to counteract the democratized offensive capabilities now available to a wider range of adversaries.