The AI Revolution in Cyber Conflict

(Lennart Maschmeyer – Lawfare) There is no shortage of hype over artificial intelligence (AI), especially in regard to its use in cyber conflict. Some observers predict catastrophic consequences as AI-powered cyberattacks proliferate. These concerns are no longer theoretical. Hacking groups are now actively using AI. In the summer of 2025, an AI model by a security startup made headlines by becoming the world’s top ranked hacker. Soon after, a Chinese government hacking group used Anthropic’s Claude model to automate a “sophisticated” cyberattack that successfully compromised several targets. And in February, hacktivists used the same model for a cyberattack against Mexico’s government that stole more than 150 gigabytes of sensitive data. The firm that discovered this hack explained that AI has definitively changed the cyber conflict game. By leveraging AI, the firm explained, “[w]annabe threat actors are causing damage in moments and experienced threat actors are amplifying their capabilities overnight to rapidly achieve some of the most impactful malicious outcomes ever recorded.”. If this prediction is true, AI will revolutionize not only cyber conflict but international conflict at large. Dire predictions of catastrophic strategic cyberattacks have existed since the inception of the World Wide Web. Thankfully, they have not manifested due to significant operational and organizational constraints involved in major cyber operations. AI automation, however, now promises to overcome these constraints. Even if it does not unleash the cyberwar scenarios scientists have warned of since the 1990s, it may still supercharge low-intensity cyber campaigns to a level where they can substitute war. In short, the era of AI-powered cyberattacks has arrived. Consequently, determining the likely impact on cyber conflict and conflict at large is both urgent and important. As one report on the Mexican government intrusion put it, “[f]or any cyber-defender continuing to deny the impact of AI on attacker efficiency, welcome to Exhibit A.” But here lies the crux: Efficiency does not equal effectiveness. – The AI Revolution in Cyber Conflict | Lawfare