During a keynote at RSA Conference 2024, CrowdStrike CEO George Kurtz affirmed that the age of AI-powered cyberattacks is here. He detailed how adversaries are currently leveraging generative AI to innovate threats, making a compelling case that the only effective response is a defense system also built on artificial intelligence.

Kurtz stated that adversaries are not waiting to weaponize AI. The technology is actively being used to create novel malware and to execute sophisticated, socially-engineered phishing campaigns at a scale and speed previously unseen. This shift marks a significant evolution in the cyber threat landscape.

The Weaponization of Generative AI

Cybercriminals are employing specific generative AI tools to enhance their attacks. Tools such as WormGPT and FraudGPT are being used to create polymorphic malware, which alters its code to evade traditional detection methods. Generative AI also lowers the barrier to entry for less-skilled attackers, enabling them to produce convincing and effective phishing lures without needing deep technical expertise. Kurtz characterized this development as the “weaponization of GenAI,” an active threat that security teams must address now.

Countering with an AI-Native Platform

The core message presented was that to stop AI-powered adversaries, defenders must fight fire with fire. Kurtz emphasized the necessity of using AI-powered cybersecurity to counter these advanced threats. He introduced Charlotte AI, CrowdStrike’s generative AI security analyst, as a tool designed for this purpose. Charlotte AI operates on the CrowdStrike Falcon platform and is built to democratize security by allowing users of all skill levels to ask questions in natural language. For example, a user can ask, “Show me all new detections in the last 24 hours” or inquire if their organization is protected from a specific vulnerability. This capability aims to accelerate detection, response, and threat hunting workflows, all managed from a unified, single-agent platform to effectively stop breaches.

Source: https://www.crowdstrike.com/en-us/blog/stop-ai-powered-adversaries-fight-fire-with-fire/