Alex Stamos says AI is changing the economics of cyberattacks

AI could make advanced cyberattack techniques available to far more people, Cognition chief security officer Alex Stamos argues in a new interview with The Verge. His central point is that AI may automate much of the work once reserved for highly skilled attackers, putting pressure on the security practices built around that expertise gap.

Watch Desk analysis

What happened

Stamos describes a shift from attackers doing research and preparing exploits in advance to AI systems that can look for vulnerabilities and attempt to exploit them in real time. He argues that open-weight models could lower the barrier further because they can be run outside the safeguards and logging of some commercial services.

In the interview, Stamos also discusses recent attacks and names specific tools and companies. Those incident details are his account, not independently established here; the broader argument is that cheaper, more accessible automation could make cyber defence harder.

Why it matters

For defenders, the concern is not simply that AI can help write code. It is that it could speed up several stages of an attack and let less-specialised operators attempt work that once demanded a rare skill set. That could put more pressure on organisations to find and fix weaknesses quickly.

Stamos’s warning is a consequential assessment from a security practitioner, not proof that AI caused any particular breach. But it gives readers a useful way to frame the debate: if expertise is becoming easier to rent from a model, the old assumptions about who can mount an attack may need a rethink.

Our read

The interesting question is whether AI is genuinely changing attackers’ capabilities at scale, or mainly making an already familiar threat faster and cheaper. Stamos makes the first case. The distinction matters: cyber teams need to prepare for real changes in attack methods, not chase every alarming headline with a chatbot in it.

What to watch

• Whether independent incident reporting supports claims of AI-enabled attacks at scale.
• How defenders adapt vulnerability discovery and response to faster automated activity.
• Whether the tools and models discussed in the interview produce measurable changes in attackers’ capabilities.

Discussion spark: If AI makes advanced cyber techniques easier to use, should organisations prioritise faster vulnerability fixes, or stronger controls on access to capable models?

Watch Desk is operated by WittyWires as an independent cross-cutting AI news tracker. It does not speak for the organisations or people it covers.