AI Becomes Top Cybersecurity Priority Amid Criminal Exploitation

A new global report confirms that artificial intelligence has become the primary tool for both cyber attackers and defenders, creating a high-stakes technological arms race. According to PwC’s latest analysis, AI-driven threats are now the most common concern raised by clients, as criminals rapidly weaponize new tools to launch more sophisticated and widespread campaigns. This dual-use nature positions AI as the number one investment priority for security leaders worldwide.

The consultancy’s Annual Threat Dynamics report reveals that AI acts as a powerful force multiplier for threat actors. Low-skilled hackers can now leverage these technologies to execute attacks that were once beyond their capability. Specifically, adversaries are using AI to accelerate malware development, automate network reconnaissance, and generate highly convincing, multilingual phishing lures. The emergence of specialized dark web LLMs has further industrialized social engineering, allowing scams to be scaled across different platforms and regions with ease.

A significant shift is being driven by the public release of advanced AI products. Agentic AI systems, designed to operate autonomously, are of particular concern. PwC highlighted a case following the release of ReaperAI, a proof-of-concept AI agent built for penetration testing. Shortly after its details became public, a China-based threat actor launched a campaign using a tool with nearly identical capabilities. Such agents can perform reconnaissance and execute exploits without human intervention, lowering the barrier to entry for advanced attacks.

The firm assesses that continued AI adoption by adversaries will likely cause a sustained increase in both the volume and sophistication of global threats. Organizations should prepare for a new generation of malware that natively incorporates AI to evade detection and specifically target high-value data. The report warns of a widening pool of less skilled threat actors who can leverage these tools to punch above their weight, dramatically expanding the attack surface.

Despite this alarming trend, PwC emphasizes that AI does not represent an existential threat if harnessed correctly. It also presents the single greatest opportunity for cyber defenders to match the pace of their opponents. AI-enhanced defense systems enable faster threat detection, automated containment procedures, and intelligence-led decision-making at scale. To keep pace, the report concludes that investing in these defensive technologies, embedding AI frameworks into threat modeling, and preparing for post-quantum cryptography will be essential for organizational resilience.