The humans burning out on AI's cyber frontlines

Threat intelligence consultant Justin Timothy of GuidePoint Security reported to Axios, "The last month has been the longest year of my life."

Even before the period known as "Black October," Timothy was already overwhelmed, contending with hacker gangs resurfacing after a seasonal summer quiet. These groups typically focus on ransomware, which involves seizing an institution's network and holding it captive.

While AI influences numerous emerging cyber threats, the ransomware issue has already crippled essential services like hospitals, pipeline systems, and education software for several years.

The situation is projected to worsen this year because potent new AI systems are accelerating attacker capabilities faster than defenders can secure the vast, unprotected expanse of the internet.

Troy Bettencourt, who oversees Palo Alto Networks' global digital forensics and incident response practice, informed Axios that demand for his team's services has risen by double digits over the past six weeks. He noted that this year's workload is a "continuous grind that increases," unlike previous spikes tied to events like SolarWinds.

Samantha Lewis, head of threat intelligence at Armadin, shared that her team was swamped with customer requests trying to ascertain if their systems faced exposure to flaws found by AI in core internet code. She stated, "This week has been pure chaos," adding that "The burden of that has been tremendous."

The escalating ability of AI to uncover more software flaws threatens to bury security professionals under even greater volumes of work. This mounting pressure is compelling security firms to employ automation and AI to speed investigations and locate weaknesses.

However, this technological shift presents a new dilemma; Bettencourt mentioned juggling staff who are exhausted by the workload while also fearing that the AI tools designed to help might ultimately replace them. He summarized this tension: "They're burning out, and they're hearing everything in the media that AI is going to take everyone's job," adding, "It's a tough balance."

Even organizations that avoided the recent security scares haven't been spared the strain. Jack Nelson, Ivanti's chief information security officer and deputy general counsel, reported getting "less sleep than normal this past week," despite his company having minimal exposure to the PHP vulnerabilities.

Cyber defenders cannot sustain this intense pace indefinitely, though many maintain hope that AI will provide more resources in what is anticipated to be a conflict lasting 12 to 18 months.