FBI warns AI accelerates cyber threats, urging focus on basic hygiene

Artificial intelligence is significantly enhancing the speed and capability of malicious hackers, according to senior officials at the Federal Bureau of Investigation. Speaking ahead of the release of a new bureau cyber strategy, these officials warned that AI is pushing adversaries to the next level, resulting in a measurable increase in offensive actions against networks. The FBI expects this trend to worsen, noting an exponential rise in AI-enabled attacks from both nation-state actors and criminal groups.

Despite the growing sophistication of these threats, FBI officials maintain that AI does not introduce entirely new vulnerabilities that traditional cybersecurity basics cannot address. Jason Bilnoski, deputy assistant director of the FBI’s cyber division, emphasized that investigations consistently show adversaries exploiting fundamental hygiene principles that organizations fail to implement. He stressed that hardening these basic controls, such as multifactor authentication, remains the most reliable way to reduce the risk of targeting by both criminals and state-sponsored actors.

Basic defenses remain the strongest shield

Bilnoski noted that the measures preventing attacks in the coming eighteen months are the same ones that would have stopped yesterday’s threats. The FBI is focusing on ten fundamental defensive measures, arguing that if organizations consistently adhere to these standards, they can significantly mitigate the impact of AI-driven attacks. This approach suggests that the complexity of modern AI tools does not necessarily require equally complex defensive strategies, provided the foundational security hygiene is robust.

The bureau is also leveraging AI for its own defensive purposes. The new strategy outlines plans to use AI-enabled tools to triage large datasets, accelerate malware analysis, and map adversary infrastructure. By adopting these technologies, the FBI aims to scale its defense and disruption capabilities, using AI to identify patterns and relationships that human analysts might miss due to volume and pace.

Patching must become a continuous process

The rapid speed at which AI models uncover vulnerabilities is forcing organizations to rethink their patching schedules. Colleen Ferranti, an assistant section chief in the cyber engagement and intelligence section, stated that the traditional quarterly patching model is no longer sufficient. She argued that organizations must evolve to a risk-based approach where patching is continuous rather than episodic.

Ferranti emphasized that systems must be trusted to engage with these technologies at the speed and level required to stay secure. This shift implies a move away from scheduled updates like Patch Tuesday toward a state of constant vigilance and immediate remediation. The goal is to ensure that systems can keep pace with the accelerated cycle of vulnerability discovery and exploitation driven by AI.

Strategic shift in federal cyber operations

The newly released FBI cyber strategy includes a dedicated section on artificial intelligence, reflecting its growing importance in national security. The document states that the bureau will rapidly adopt agentic AI to securely scale defense and disruption efforts. This includes using AI to detect, divert, and deceive threat actors when operationally appropriate, marking a significant expansion of the bureau's technical toolkit.

Additionally, the strategy highlights the continued development of the Computer Network Operations program. This program provides investigative teams with lawful technical operations tools to remotely collect data and disrupt activities of nation-state and cybercriminal actors. These measures are intended for situations where traditional investigative techniques are insufficient, ensuring the FBI can respond effectively to the evolving digital threat landscape.