FBI: AI Accelerates Cyber Attacks but Basic Security Still Works

FBI warns AI is amplifying cyber threats

Artificial intelligence is significantly enhancing the speed and sophistication of cyber attacks, according to senior FBI officials who spoke this week ahead of the bureau's release of a new cyber strategy.

Jason Bilnoski, deputy assistant director of the FBI's cyber division, told reporters that AI is "taking actors to the next level," enabling both nation-state and criminal hackers to target networks with unprecedented velocity and capability. The FBI's latest annual digital crimes report includes new data showing measurable impact from AI-enabled attacks, and Bilnoski expects the trend to intensify.

"The wave is coming. I don't think we've hit the crest yet," Bilnoski said at the Billington CyberSecurity Summit. "We see an exponential increase in the use of AI, whether it's nation-state or criminal."

Basic security hygiene remains the answer

Despite the AI-powered escalation, FBI investigations consistently reveal that attackers—even those using AI—succeed by exploiting fundamental security weaknesses. Bilnoski emphasized that organizations failing to implement basic defensive measures like multifactor authentication remain vulnerable regardless of how sophisticated the threat becomes.

"The adversaries are still [exploiting] basic principles or basic cyber hygiene principles that we are not following," he said, referencing the FBI's emphasis on 10 fundamental security controls. "What will prevent the attacks in the next 18 months are the same things that would have prevented the attacks of yesterday."

Continuous patching now essential

The accelerated pace of AI-driven vulnerability discovery is forcing organizations to abandon traditional patching schedules, according to Colleen Ferranti, assistant section chief in the FBI's cyber engagement and intelligence section.

"We no longer can essentially do the quarterly patching," Ferranti said. Organizations must shift to continuous, risk-based patching rather than relying on monthly or quarterly cycles like Patch Tuesday.

FBI's AI adoption plans

The newly released FBI cyber strategy outlines how the bureau will deploy AI-enabled tools to process large datasets, accelerate malware analysis, map adversary infrastructure, and identify attack patterns at machine speed. The strategy commits to rapidly adopting agentic AI to scale both defense and disruption operations.

The FBI also plans to expand its Computer Network Operations program, providing investigative teams with court-authorized tools to remotely collect intelligence, conduct surveillance, and disrupt threat actors when conventional techniques prove insufficient.

Additional priorities include expanding the Industrial Control Systems Coordinator program to every field office and improving victim support through faster threat intelligence sharing and incident response.

Why it matters

The FBI's acknowledgment that AI is fundamentally changing the cyber threat landscape—while simultaneously affirming that basic security practices remain effective—offers organizations a clear defensive roadmap. The shift from periodic to continuous patching represents a practical operational change that security teams must implement immediately, as AI tools enable attackers to weaponize newly discovered vulnerabilities within hours rather than weeks. For business leaders, this means security budgets should prioritize foundational controls and automation over exotic solutions.

These details were first reported by CyberScoop.