AI-Enabled Cyberattacks Will Outpace Human Defenses, Security Expert Kevin Mandia Warns

The speed of AI-enabled cyberattacks will soon exceed the capacity of human security teams to respond in real time, cybersecurity veteran Kevin Mandia warned in an interview on Bloomberg Technology. Mandia, who founded Mandiant and led the firm through its acquisition by Google before going on to lead Armadin, argued that the asymmetry between AI-augmented offensive capabilities and largely human-staffed defensive operations represents the most significant structural challenge facing enterprise security. Automated attack chains can probe systems, identify vulnerabilities, generate exploits, and pivot through networks at a pace that outstrips the response times achievable by even well-resourced security operations centers. The warning reflects a growing consensus in the security industry that AI is compressing the timeline of the attack kill chain. Tasks that once required skilled human operators working over hours or days, including reconnaissance, credential harvesting, and lateral movement, are being automated to execute in minutes. The defensive implication is that security operations must also adopt AI-driven automation to have any chance of matching attacker tempo. Manual incident response workflows, triage queues, and alert review processes were designed for a threat environment where attacks moved at human speed. Mandia noted that the most dangerous near-term scenarios involve AI systems that can autonomously identify and exploit zero-day vulnerabilities before defenders have time to develop patches and push them to exposed systems. The combination of AI-assisted vulnerability discovery and automated exploitation would effectively shrink the patch window to near zero. He called for increased investment in AI-native security tooling and argued that detection and response automation should be a board-level priority rather than a purely technical operations decision.