How AI-armed script kiddies will soon wield the power of state-sponsored threat actors

Follow ZDNET: Add us as a preferred source on Google.

Can you imagine a future when script kiddies -- low- or no-skill wannabe hackers who use prewritten scripts or tools to cause havoc -- can shake the foundations of cyberdefense?

According to Palo Alto Networks' Unit 42 research team, that's a "probable" scenario.

In a briefing on Wednesday, Unit 42 discussed early findings from its new service, Frontier AI Defense . Launched in April, Unit 42's service combines threat intelligence, threat telemetry, and frontier AI models to help enterprise clients address security issues that have become urgent due to AI.

Also: A low-tech solution from the past may be your best defense against AI deepfakes

The team says that in three weeks of internal tests, Unit 42 completed the equivalent of about one or two years of penetration testing, uncovering dozens of vulnerabilities across customer environments using AI pen-testing models.

If we consider this result and how the speed of AI-based vulnerability discovery and testing can be applied, we can also understand just how much impact AI models could have for cybercriminals using the same tools for their own malicious ends.

We're not just talking about skilled, well-funded cybercriminals, either.

When we consider cyberattacks today, we tend to organize them into two main categories: cyberattacks driven by financial goals, or attacks carried out by state-sponsored threat actors, who may seek information, disrupt or destroy, or conduct surveillance.

There are smaller categories, too, such as hacktivists and those who commit malicious actions for social or political reasons. According to Unit 42, it's the sudden AI-enabled power boost for these individuals that we need to watch.

In the briefing, Sherrod DeGrippo, VP Threat Intelligence at Unit 42, said that the traditional categories of cyberattacks have shifted, and that socially motivated groups are being "enabled with the same tooling and sophistication as a state-sponsored group" due to artificial intelligence.

Also: OpenAI's attack agent did exactly what it was told - just more relentlessly than expected

"This part of the landscape will continue to increase and bring in low-skilled actors that now have exponentially bigger and better capabilities than we've seen before," DeGrippo commented. "These are people who know how to use a tool -- and we've given them incredible tools."