AI is both weapon and target as cyberattacks surge 89%, CrowdStrike reports
Machine-assisted attacks are accelerating, shrinking patch windows to 48 hours — here's what that means for defenders and learners
CrowdStrike has reported an 89% surge in machine-assisted cyberattack activity, according to a recent report. The cybersecurity firm notes that artificial intelligence is being used both as a weapon to launch attacks and as a target for exploitation. The report highlights that patch windows — the time organizations have to fix vulnerabilities before attackers exploit them — have shrunk to just 48 hours.
This trend reflects a rapid escalation in the speed and scale of cyber threats, driven by AI tools that automate reconnaissance, phishing, and exploit development. Attackers are leveraging machine learning to craft more convincing social engineering campaigns and to identify weaknesses faster than ever before. At the same time, AI systems themselves are becoming targets, as adversaries seek to manipulate or poison the models that organizations rely on.
The report does not specify which sectors or regions are most affected, but the global nature of AI-driven attacks means no organization is immune. The shrinking patch window underscores the urgency for defenders to adopt faster, more automated response mechanisms.
Why it matters
This development signals a new phase in cybersecurity where AI amplifies both offense and defense. For organizations, the 48-hour patch window means traditional monthly update cycles are no longer sufficient. For learners, it highlights the growing importance of understanding how AI can be used maliciously — and how to defend against it. The field is moving toward real-time threat detection and automated response, making skills in AI security and rapid incident response increasingly valuable.
This development signals a new phase in cybersecurity where AI amplifies both offense and defense.
Reconnaissance
AI scans networks and social media for vulnerabilities and targets
Weaponization
Generative AI creates phishing emails or malicious code
Delivery
Automated bots send payloads to thousands of targets
Exploitation
AI adapts attack in real-time based on defenses encountered
What you can learn from this
- Machine-assisted attacks and automation: Attackers use AI to automate tasks like scanning for vulnerabilities, generating phishing emails, and evading detection. As a learner, you should understand how these tools work — for example, how generative AI can create convincing fake messages — and practice identifying signs of automated attacks, such as unusual traffic patterns or repetitive login attempts.
- Patch management under pressure: The 48-hour patch window means organizations must prioritize rapid deployment of security updates. Learn how patch management works: testing patches in staging environments, using automated deployment tools, and maintaining rollback plans. Practice setting up a simple CI/CD pipeline that includes security patching as a step.
- AI as a target: AI models themselves can be attacked through techniques like data poisoning (inserting malicious data into training sets) or adversarial inputs (crafting inputs that cause misclassification). Study the basics of adversarial machine learning — for instance, how small perturbations to an image can fool a classifier — and explore defensive techniques like adversarial training.
- Defensive AI and threat detection: Just as attackers use AI, defenders can use machine learning to detect anomalies, classify malware, and prioritize alerts. Learn how supervised and unsupervised learning apply to cybersecurity — for example, training a model on network traffic to flag unusual patterns. Experiment with open-source tools like Snort or Suricata for intrusion detection.
- Incident response in an AI-driven landscape: With faster attacks, incident response must be automated and well-rehearsed. Study the NIST incident response framework (preparation, detection, containment, eradication, recovery) and practice creating a playbook for a simulated attack. Understand how AI can assist in each phase, such as using chatbots for initial triage or automated scripts for containment.
We teach this
Sources
Our reporting is an original summary; full coverage is at the links above.
Don't just read about it — build it.
Square 1 teaches the skills behind the headlines, with every line of your work graded by AI. Find your starting point in 3 minutes.
Get your free skill report