AI's dual nature: Defenders and attackers race to exploit the same vulnerabilities

The technology industry faces a paradox: the same advanced AI systems that help organizations detect security flaws are equally available to threat actors seeking to exploit them. Recent events underscore how this arms race is accelerating across the digital landscape.

Security researchers deployed OpenAI Group PBC's GPT-5.6 Sol to examine the PHP programming language codebase, which runs approximately 70% of websites globally. The scan uncovered critical vulnerabilities that organizations rushed to patch. However, Amazon.com Inc. reported that attackers began exploiting PHP flaws just four days before official patches became available. Cloudflare Inc. subsequently tracked exploit attempts climbing into the millions.

The implications extend beyond individual incidents. At Dell Technologies World in Las Vegas, industry leaders emphasized that data protection and cyber resilience must become foundational layers for enterprise AI systems. According to theCUBE Research's Krista Case, "This is part of a broader market conversation that ties cyber recovery capabilities to resilience, AI governance, data integrity, and operational trust, in a world where enterprise AI systems are only as reliable as the data pipelines, runtime controls, and recovery processes supporting them."

Coping with AI impact on cybersecurity

The cybersecurity community increasingly recognizes that AI has the potential to create significant vulnerabilities in system defenses. AI models have substantially amplified the capacity to identify and potentially weaponize weaknesses. Microsoft Corp. documented 1,453 new vulnerabilities in October alone.

Steve Kenniston, senior cybersecurity evangelist for portfolio marketing at Dell, explained the scope of the challenge: "AI changes the whole game. There's the model inferencing. There's the model training data. There are systems where people can do things like prompt injection. There's identity management that needs to be thought about."

Dell participates in Anthropic PBC's Project Glasswing, which provides vetted organizations access to advanced AI capabilities for securing critical infrastructure. The initiative targets organizations whose software underpins essential systems and could trigger catastrophic consequences if compromised.

The proliferation of AI agents has intensified focus on identity management within enterprise networks. Broader availability of AI tools to malicious actors has fundamentally altered threat dynamics and access control requirements. John Scimone, president and chief security officer of Dell, observed: "Undoubtedly the cost of entry and the barriers to entry have crumbled. Said another way, the least sophisticated attack tomorrow is more sophisticated than the world will have ever seen a year ago."

Importance of data resilience

Unlike natural disasters with advance warning systems, cyberattacks typically arrive without notice. This reality has elevated the importance of recovery and resilience capabilities. Joseph D'Angelo, Director of Product Management at InfoScale, emphasized: "There's no prediction here. So, the only way to protect yourself is to ensure that you have what we like to call a defensible recovery posture. And that is understanding the state of your applications, understanding the state of your data, and being able to recover those in a way that is not encumbered or in any way compromised by an attack."

The quality of data directly determines the effectiveness of AI systems powering enterprise applications. Storage providers like Infinidat are developing security solutions designed to maintain operational resilience as AI accelerates both the speed and complexity of cyber threats. These approaches combine immutable snapshots, threat detection, and recovery mechanisms to help organizations identify uncompromised recovery points and prevent restoration of corrupted data.

Infinidat Chief Marketing Officer Eric Herzog stated: "It's all about the data. The core is the data, which is why you need next-generation data protection on your primary storage, which is what AI would use. You need next-generation data protection on your backup, as well."

Preparing for the quantum threat

Post-quantum cryptography (PQC) represents another emerging priority for enterprise security strategies. The transition from classical encryption to quantum-resistant algorithms capable of withstanding attacks from future quantum computers is essential for long-term cyber resilience.

Current organizational preparedness appears inadequate. A DigiCert Inc. study released earlier this year found that only 7% of surveyed organizations have implemented quantum-safe or hybrid cryptography across most of their digital certificates. As AI agents expand the role of data in enterprise platforms, quantum threats could create significant operational disruption.

Dell's global CTO and chief AI officer John Roese warned: "Quantum computing will break the encryption and digital signatures protecting data today, while agentic AI raises the stakes by increasing the value of data and autonomously shares it across teams and organizations."

AI research has illuminated the scope of quantum vulnerabilities. An Anthropic PBC report from late July described how researchers using Claude Mythos Preview identified improved methods for attacking cryptographic algorithms, including a successful compromise of HAWK, one of nine candidates in the National Institute of Standards and Technology's (NIST) process for additional post-quantum digital signature algorithms.

Garrison Buss, chief technology officer and co-founder of QuSecure Inc., noted: "CISA, NSA, and NIST have warned since 2023 that adversaries could be collecting encrypted data now and holding it until they can decrypt it. What the AI results change is the other side of that clock – an attacker no longer needs a quantum computer to make meaningful progress; they only need classical compute and a few days."

Security in the infrastructure layer

As enterprises accelerate AI adoption, they must simultaneously defend against threats that these technologies introduce. This dual imperative demands infrastructure-level security capable of addressing risks from agentic AI, quantum computing, and sophisticated models in adversarial hands.

theCUBE Research analyst Christophe Bertrand stated: "There is no AI without a secure infrastructure, and that means data that is also recoverable, that is secure, and is of course compliant. Cyber resiliency risk is not just on the data, what you have to go through every day, it's also starting to appear in the actual AI infrastructure itself. Don't make backup and recovery an afterthought, because it's going to hurt your wallet."

A significant unknown remains: controlling AI itself. Publicized attacks on Hugging Face and the United Nations attributed to "rogue" AI agents illustrate the security complexities of autonomous systems. The technology sector may require unconventional approaches to cybersecurity in this new environment.

theCUBE Research's Dave Vellante reflected on this shift: "We used to draw the stack, and security was a layer. It's not a layer anymore. It has to be something that's orthogonal. I think that the attackers are always going to have an advantage. You know the old saying, they only have to be right once. And there's always going to be seams."