AI: Cybercriminals' New Toolkit and Target

Artificial intelligence is rapidly becoming a dual-use technology in cybersecurity, serving as both a potent weapon for adversaries and a vulnerable target. Researchers note that malicious actors are adopting AI at a pace mirroring legitimate business growth, creating significant challenges for defenders.

CrowdStrike's 2026 Threat Hunting Report indicates that AI models, tools, and workflows are being exploited by cybercriminals. The expanding corporate networks and deployment of new large language models (LLMs) inadvertently create larger, undefended attack surfaces. These can be leveraged for data theft, unauthorized AI model access, surveillance, and resource harvesting.

Threat actors are actively weaponizing AI environments, using AI-generated materials for recruitment and deepfake interviews. Techniques like LLMJacking, where attackers gain access to AI model credentials, can trigger nearly 200,000 API requests in mere minutes, causing substantial financial and operational disruption.

The vulnerability exploitation window has dramatically shrunk, with 88% of exploits occurring within 48 hours of public proof-of-concept code release. Some advanced threat groups can develop working exploits for critical vulnerabilities in less than a day, underscoring the accelerating pace of cyber warfare driven by AI.

This trend compresses the timelines for vulnerability discovery and exploit development, placing immense pressure on cybersecurity teams already struggling to keep pace. Businesses must adopt proactive strategies to manage the evolving threat landscape driven by AI.