AI Accelerates Cyber Arms Race, Experts Debate Defender-Attacker Advantage

Artificial intelligence is rapidly transforming the cybersecurity landscape, equipping attackers with more potent and faster tools while simultaneously creating new opportunities for defense technology companies. Experts convened at the Tech1 conference, organized by Calcalist and Live Nation, to discuss the escalating arms race and the impact of AI on the industry.

While some anticipate defenders will eventually gain the upper hand, others believe attackers currently hold a significant advantage. Beni Lakunichuk, founder and CEO of Zero Networks, predicts defenders will win in the long run but acknowledges a short-term edge for attackers due to their powerful new tools. Amit Asraf, founder of Koi and now with Palo Alto Networks, expressed greater concern, stating that defenders are years behind attackers and that the most difficult challenges are yet to come, though he remains optimistic due to increased risk awareness.

Initial fears about AI enabling sophisticated cyberattacks are being tempered by the recognition of its potential as a defensive opportunity. Lakunichuk argued that apocalyptic predictions were exaggerated, emphasizing that while AI can build powerful tools, creating a successful company around them is a different challenge. He also noted that AI will not overnight replace complex cyber technologies.

The evolving threat landscape presents a dynamic environment for cybersecurity startups. Asraf highlighted that past approaches may no longer be relevant, stressing the need for entrepreneurs to adapt quickly to new realities. He sees significant growth potential for the industry, provided companies can identify vulnerabilities and deploy effective countermeasures.

In the mergers and acquisitions market, buyers are becoming more selective, seeking specific teams or technologies rather than just large companies. Yoav Manor, a partner at the Shiboleth law firm, noted that while mega-deals occur, many companies in the middle ground face challenges in finding buyers. He also pointed out that the average deal size can be misleading, with a mix of smaller and significant acquisitions expected.

Balancing the integration of AI tools for efficiency with the inherent security risks is a key dilemma for CISOs. Asraf advised that organizations must achieve good visibility into their systems and prepare for breaches, viewing security as integral to business operations. Manor stressed the importance of checks and balances, ensuring products function as intended and that customers understand the permissions granted to AI systems. He anticipates greater involvement from senior leadership in AI integration decisions.

Looking ahead, experts debated who would hold the advantage in five years. Lakunichuk and Manor predicted the defenders (blue team) would prevail, while Asraf and Manor (in a separate comment) foresaw the attackers (red team) maintaining their edge, with Manor citing that attackers only need to find one vulnerability, whereas defenders must protect the entire system.