Israel Warns of AI-Powered Cyber Threats Accelerating Attack Times

Israel's National Cyber Directorate has issued a stark warning about a paradigm shift in cyber warfare, driven by the integration of autonomous artificial intelligence tools into the arsenals of hackers and espionage groups. At a special meeting convened for the Jewish New Year, National Cyber Directorate head Yossi Kardi informed leading figures in the local high-tech and cyber industry that the time gap between cyber defense and attack is rapidly shrinking to near zero.

In response to escalating threats, the Directorate announced the formation of a national intervention unit for large-scale cyber incidents and a multidisciplinary laboratory. This lab will foster collaboration between government, academia, and private industry in the fields of AI, cloud computing, and quantum technology. According to data presented by Avraham Zrook, head of the Directorate's Technological Division, the rapid advancement of AI language models and agents has dramatically accelerated autonomous attack capabilities. Test scenarios revealed that the time from initial network penetration to full lateral spread within an organization has been reduced to approximately 27 seconds.

Furthermore, machine learning-based automation tools can now generate personalized phishing pages in about 30 seconds. Advanced AI models are independently capable of executing 28 out of 32 defined stages in a complex attack chain, from vulnerability scanning and bypassing authentication to privilege escalation. This reality fundamentally alters information security dynamics, rendering traditional human-led response times insufficient against machine-speed attacks.

Kardi emphasized the need for a transition to fully autonomous, algorithm-driven response systems, such as SOAR (Security Orchestration, Automation, and Response) platforms, which can isolate servers and block traffic before human operators can even receive an alert. This Israeli initiative aligns with a global trend of digital "fortification," with the US CISA promoting Zero Trust architectures and the EU implementing its AI Act to regulate model developers.

Israel faces constant cyberattacks, particularly from Iranian proxies and global attack groups, which intensified during Operation "Iron Fist" in June 2025. While critical national infrastructure remains protected, the increasing pressure on the civilian and business sectors necessitates a systemic upgrade. The new national lab and intervention unit aim to create a unified defense umbrella, supporting companies that lack the resources of large corporations, recognizing that fragmented defense is a critical vulnerability in an algorithm-driven digital war.