AI security
AI Tools Are Enabling Large-Scale Attacks at Minimal Cost, Dark Reading Reports
Dark Reading reports that AI tools are being used to generate massive attacks for very little money, citing one campaign that targeted 105 sites with open-weight models and another in which public models achieved full domain control for just $12.
Artificial intelligence tools are dramatically lowering the cost of running large-scale cyberattacks, according to a report from Dark Reading, and the shift may force defenders to rethink their approach.
The report describes two striking examples. In one campaign, attackers targeted 105 sites using open-weight models — AI systems whose parameters are freely available and can be run without the guardrails typically imposed by commercial providers. In a second case, public AI models were used to gain full domain control of a target environment at a cost of just $12, according to the report.
Taken together, the cases illustrate a growing asymmetry: the expense and expertise once required to plan and execute intrusions are falling sharply, while the potential reach of a single operation expands. Tasks that previously demanded skilled human operators — such as reconnaissance, exploitation and moving through a compromised network — can increasingly be delegated to inexpensive, widely available models.
According to Dark Reading, the conclusion drawn from these campaigns is that cyber-defense will have to change in response. When an attacker can compromise an environment for the price of a takeaway meal, defensive strategies built around the assumption that attacks are costly or labor-intensive become harder to sustain.
The report frames the trend as an operational warning for security teams: the barrier to entry for meaningful attacks is collapsing, and defenses will need to adapt to a landscape in which large-scale, AI-driven campaigns are cheap enough to be routine. Further details are available in the original Dark Reading report.
Source: Dark Reading
