AI's Role in Enhancing Strategic Cyberattack Potential

Cyber weapons have historically been viewed as strategic tools in statecraft, yet their practical application has predominantly been tactical. Attackers often face challenges in predicting the outcomes of their operations, navigating complex classification systems, and acquiring the necessary expertise to conduct large-scale cyberattacks. Consequently, these operations have seldom produced the extensive strategic impacts anticipated by theorists and government sources.

A recent analysis argues that artificial intelligence, especially agentic AI—systems capable of pursuing goals autonomously—will significantly enhance the strategic potential of cyber operations. This transformation is expected to occur primarily by reducing the reliance on expert human capacity, which has previously limited the strategic outcomes of cyber activities.

The analysis begins by exploring the divide between tactical and strategic applications of statecraft tools. It identifies three critical characteristics that have restricted most cyber activities to tactical uses, explaining why known cyber operations have not met strategic expectations. The author then evaluates how current advancements in AI are likely to influence these factors, albeit with varying degrees of impact, and what this means for the future of strategic cyber operations.

This research was independently initiated by the Center for the Geopolitics of Artificial General Intelligence within RAND Global and Emerging Risks, funded through operational income and contributions from RAND supporters. It is part of the RAND expert insights series, which offers perspectives on pressing policy issues. RAND is a nonprofit organization dedicated to improving policy and decision-making through comprehensive research and analysis.