Germany’s leading domestic intelligence and cybersecurity authorities have warned that rapid advances in artificial intelligence are poised to significantly alter the cyber threat landscape, increasing both the scale and sophistication of digital attacks while simultaneously transforming the tools available to those responsible for defending critical systems. Their assessment highlights AI as an increasingly influential force that is reshaping offensive and defensive cyber capabilities alike, with officials cautioning that future security will depend on keeping pace with the technology’s accelerating development.
The warning comes from the Federal Office for the Protection of the Constitution (Bundesamt für Verfassungsschutz) and the Federal Office for Information Security (Bundesamt für Sicherheit in der Informationstechnik, BSI), both of which expect the cyber threat environment to become more severe as AI models continue to improve. According to statements provided to Handelsblatt, increasingly capable AI systems are expected to expand the opportunities available to malicious actors while reducing the technical barriers that have traditionally limited the execution of sophisticated cyber operations.
The Federal Office for the Protection of the Constitution said that artificial intelligence is making large-scale cyberattacks increasingly feasible. According to the agency, AI lowers the entry threshold for conducting cyber operations, enabling a broader range of actors to carry out activities that previously required greater expertise and resources. The agency added that modern AI technology supports every stage of cyber operations, including reconnaissance, automation, and the scaling of attacks, allowing malicious activities to be conducted more efficiently and on a wider scale.
The assessment reflects growing concern that AI is no longer simply enhancing existing cyber techniques but is fundamentally changing how digital attacks can be organised and executed. By assisting with reconnaissance, automating repetitive processes, and enabling broader operational reach, increasingly advanced AI models have the potential to accelerate cyber campaigns while reducing the effort required to launch them.
The Federal Office for Information Security has reached a similarly cautious conclusion regarding the potential misuse of artificial intelligence. A spokesperson told Handelsblatt that leading AI models developed over the past year have demonstrated “great potential in identifying vulnerabilities” within digital systems. Beyond merely locating weaknesses, the spokesperson said the models are now capable of exploiting discovered vulnerabilities themselves, marking a further development in their operational capabilities.
This progression suggests that AI systems are becoming increasingly capable of performing tasks that once depended heavily on human expertise. The ability not only to identify security flaws but also to exploit them represents a notable expansion in the potential role of AI within cyber operations, reinforcing official concerns about the evolving threat environment.
Despite these developments, the BSI noted that the most advanced AI models have so far delivered only limited practical value for cybercriminals. According to the agency, the substantial computing power and associated costs required to operate the strongest models have constrained their widespread use for malicious purposes. Those economic and technical barriers have, to date, limited the extent to which sophisticated AI capabilities can be deployed by criminal actors.
However, the agency also warned that this situation is unlikely to remain unchanged. As computing hardware becomes more affordable, the cost of deploying increasingly capable AI systems is expected to decline, reducing one of the principal obstacles currently limiting their misuse. The BSI indicated that lower hardware costs could make powerful AI tools more accessible, increasing the likelihood that they will be adopted more widely for cyberattacks in the future.
While both agencies emphasised the growing risks associated with artificial intelligence, they also stressed that the technology presents significant opportunities for strengthening cybersecurity. Rather than viewing AI solely as a tool for attackers, the authorities argued that it has become an increasingly important component of effective defensive strategies.
The Federal Office for the Protection of the Constitution stated that artificial intelligence is “not only a tool for attackers, but also an indispensable component of modern defence strategies”. The agency’s assessment reflects the view that the same technological advances capable of enabling more sophisticated cyberattacks can also improve the ability of defenders to identify threats, respond more rapidly, and strengthen overall cyber resilience.
The parallel development of offensive and defensive AI capabilities illustrates the dual nature of the technology. As cyber threats become increasingly automated and scalable, security agencies anticipate that defensive measures will likewise need to incorporate advanced AI tools to remain effective. The evolving technological environment, according to the assessments of both authorities, makes the integration of AI into cybersecurity not merely advantageous but increasingly necessary.
