How AI Helps Defenders Keep Up and Where It Still Falls Short
TechTarget, Tuesday, August 19th, 2025
AI's real value to defenders is deciding what deserves human attention first, not doing more work.
MOXFIVE's Ben Harel argues that most organizations do not know with confidence whether their defenses would hold against how attackers operate now.
AI compresses the timeline for attacks teams already understand, letting more attackers move through the kill chain faster, while criminally marketed Dark LLMs extend the ransomware-as-a-service pattern into reconnaissance, phishing, and exploit assistance. Adding more products rarely helps, since the real challenge is clarity about which exposures and control gaps address risk.
AI's greatest value is correlating fragments such as unusual logins, persistence, and lateral movement into prioritized investigations. Digital forensics remains critical because it reconstructs what actually happened, including what controls missed.