{"id":542622,"date":"2026-07-28T16:33:16","date_gmt":"2026-07-28T14:33:16","guid":{"rendered":"https:\/\/silicon-saxony.de\/dresden-institute-for-data-protection-the-impact-of-artificial-intelligence-on-cybersecurity\/"},"modified":"2026-07-28T16:33:16","modified_gmt":"2026-07-28T14:33:16","slug":"dresden-institute-for-data-protection-the-impact-of-artificial-intelligence-on-cybersecurity","status":"publish","type":"post","link":"https:\/\/silicon-saxony.de\/en\/dresden-institute-for-data-protection-the-impact-of-artificial-intelligence-on-cybersecurity\/","title":{"rendered":"Dresden Institute for Data Protection: The Impact of Artificial Intelligence on Cybersecurity"},"content":{"rendered":"

<\/p>\n

Artificial Intelligence Is Changing the Cybersecurity Landscape<\/h3>\n

The \u201cstarting point\u201d is relatively clear. Whereas attackers\u2014or, in the words of the BSI, \u201cmalicious actors\u201d\u2014used to require enormous amounts of time and financial resources in the past\u2014for example, to compose phishing emails\u2014AI systems are now breaking into entirely new realms. Within extremely short time frames, it is possible to analyze software and thereby identify new vulnerabilities and so-called exploits.<\/p>\n

Furthermore, attackers benefit \u201cto a particular degree from speed, scale, and automation.\u201d  The BSI even goes so far as to state that AI is changing \u201cthe dynamics of vulnerability discovery, exploit development, and attack operations so drastically that previously viable defense assumptions are coming under considerable pressure.\u201d This does not, of course, mean that all security strategies and approaches developed to date are obsolete. Nevertheless, adjustments are necessary\u2014particularly with regard to processes and response mechanisms\u2014to address the significantly more complex threat landscape.<\/p>\n

What risks and opportunities exist?<\/h3>\n

First and foremost, a new dynamic is emerging. The use of AI results in a much higher speed and, consequently, a much greater need for action when it comes to detecting and responding to attacks: “One of the key developments is that, on the one hand, more vulnerabilities are being discovered, but on the other hand, the time between vulnerability discovery and potential exploitation is shrinking dramatically or even turning negative\u2014so-called zero-day attacks.”<\/p>\n

In addition, social engineering is playing an increasingly significant role due to AI-driven automation of attacks: \u201cAI can serve as a tool for attackers to carry out efficient, targeted, and difficult-to-detect phishing campaigns.\u201d Furthermore, publicly available information from corporate websites or social media can serve as additional fodder or be used for personalized attacks.<\/p>\n

Last but not least, AI systems themselves naturally also provide a gateway for attackers. The BSI points out that large language models (LLMs) in particular\u2014and AI systems based on them\u2014exhibit new classes of vulnerabilities, such as so-called prompt injections and indirect prompt injections: “In these attacks, attackers either use direct requests to AI systems to change configurations or even execute code on (internal) systems, or they hide instructions\u2014for example, on websites, in documents, or in emails\u2014which are then unwittingly (indirectly) passed on to the model and can specifically influence its behavior.\u201d<\/p>\n

However, AI also offers new opportunities for organizations. For example, it provides the ability to check one\u2019s own IT infrastructure for security vulnerabilities, update inventory lists, and create synergies to compensate for a lack of material or human resources. However, in all considerations, it must always be kept in mind that AI tools should only serve as a supplementary measure, never as a replacement.<\/p>\n

What measures does the BSI recommend?<\/h3>\n

The first\u2014and most important\u2014aspect is for the private sector and public administration to address these new challenges: “Organizations must adapt to the new threat landscape in the short term and implement targeted measures.” The security measures listed below and outlined by the BSI are not newly developed, but they are becoming increasingly important.<\/p>\n