AI Hackers Are Here

Foreign hackers backed by adversarial nations like China and Russia are now deploying artificial intelligence to amplify their assaults on American networks, marking a dangerous shift in the cyber battlefield.

Anthropic revealed this month that Chinese state-sponsored operatives harnessed its Claude AI tool in September to automate a sweeping espionage operation. The hackers zeroed in on roughly 30 targets, spanning tech outfits, banks, chemical plants, and federal offices, and managed to penetrate multiple systems.

“This is simply the tip of the iceberg and a clear indication of the future threat landscape,” said John Watters, CEO and managing partner at cybersecurity firm iCounter.

Google, meanwhile, documented Russian military hackers leaning on AI to generate malware code tailored for strikes against Ukrainian entities.

“Guys wake the f up. This is going to destroy us — sooner than we think — if we don’t make AI regulation a national priority tomorrow,” said Senator Chris Murphy (D-Conn.).

These cases align with a broader pattern outlined in Microsoft’s October report, which tracked a spike in AI-fueled attacks from Russia, China, Iran, and North Korea, logging more than 200 such events in July alone. The tech giant’s findings show adversaries refining phishing schemes, scripting exploits, and probing defenses with unprecedented speed.

China’s hackers have maintained footholds in vast segments of U.S. critical infrastructure for years, positioning them to tamper with essentials like water supplies or energy grids at will. Recent accounts from outlets like The Wall Street Journal confirm that in the Anthropic incident, AI handled 80% to 90% of the workload, from reconnaissance to data exfiltration, with minimal human oversight.

The breach of President Donald Trump’s phone during the 2024 campaign serves as a stark reminder that no one is beyond reach, even at the highest levels.

Chris Krebs, who once led the nation’s top cyber agency, posted on LinkedIn: “The fact this is only one model and the rest are likely being similarly abused — all chilling stuff that we’ve been expecting for years.”

Federal efforts to counter these threats have faltered, with the Cybersecurity and Infrastructure Security Agency shedding more than a third of its workforce this year through layoffs and buyouts. Congress let a key liability protection program for threat-sharing expire last year, straining partnerships between private companies and the government. Budget slashes have further hampered how states and localities fund their own cyber protections, leaving utilities and other vital services exposed.

Jen Easterly, former CISA director, wrote: “We’re moving quickly into an era where adversaries will automate the parts of the kill chain that don’t require creativity or deep expertise — and defenders need to be ready.”

Private cybersecurity vendors are stepping up by weaving AI into their tools to spot phishing, halt rogue scripts, and predict enemy moves. Yet without decisive action to secure AI models themselves—perhaps through mandatory safeguards or export controls on sensitive tech—America’s adversaries will continue to outpace us.

Whispers in security circles suggest big tech firms may have downplayed these risks for too long, prioritizing growth over vigilance, while bureaucratic inertia in Washington allowed the gaps to widen. If left unchecked, these AI-enhanced intrusions could cripple the economy, disrupt daily life, and erode national sovereignty in ways we’ve only begun to grasp.