AI Is Changing Everything About Hacking. No One Knows What Happens Next

Key Points:

• Cybersecurity experts are increasingly alarmed by AI-powered tools rapidly discovering and exploiting numerous software vulnerabilities, leading to fears of a major “Black Swan” event in internet security.
• AI has fundamentally altered offensive hacking and defensive cybersecurity by making it much easier to identify and exploit previously unknown or neglected software flaws across the internet, with significant recent vulnerabilities found in PHP, Node.js, Gitlab, and other platforms.
• The PHP2Shell vulnerability, discovered using AI by researchers from Wiz and OpenAI, has prompted urgent global patching efforts, with millions of exploitation attempts observed shortly after its disclosure, and some major websites temporarily taken offline for updates.
• AI accelerates both vulnerability discovery and exploit development, but while AI tools enhance productivity, expert knowledge remains crucial to turning bugs into effective attacks; meanwhile, the speed and unpredictability of AI-driven findings challenge traditional cybersecurity practices.
• The full impact of AI-enabled hacking remains uncertain, but experts warn that much of the internet’s software is vulnerable or outdated, raising concerns about widespread security breaches, loss of historic digital content, and the need for urgent, ongoing cybersecurity adaptation.