Lesson 1 of 6
Lesson 1 — Why AI and Cybersecurity Collide
AI is now both the sharpest weapon attackers hold and the fastest defence teams deploy. Map the modern battlefield.
Learn it
Cybersecurity used to be humans versus humans. Now it is often humans-with-AI versus humans-with-AI.
Attackers use AI to write convincing scam messages, clone voices and find weaknesses faster than ever.
Defenders use AI to spot strange behaviour in millions of events per second — something no human team could read.
Key terms
- Threat actor
- A person or group carrying out an attack — criminal, hacktivist, insider or nation-state.
- Attack surface
- Every point where an attacker could try to get in. AI systems add new ones.
- Anomaly detection
- An ML technique that learns normal behaviour and flags what doesn't fit.
- Force multiplier
- Something that makes a small team far more effective — AI is one for both sides.
- Dual-use technology
- A tool that can be used to protect or to harm, depending on who holds it.
Map one attack from both sides
A fake 'HR payroll update' email lands in 400 staff inboxes at 08:55 on a Monday.
- 1Attacker + AI: An LLM writes 400 slightly different versions, each referencing the real manager's name scraped from LinkedIn. No spelling errors, correct company tone.
- 2Defender + AI: The mail gateway model notices 400 near-duplicate messages from a domain registered 3 days ago and quarantines them.
- 3Attacker adapts: The next wave sends 40 messages over 6 hours from an aged, compromised supplier account — deliberately under the volume threshold.
- 4Defender adapts: A behaviour model flags that the supplier account has never previously emailed payroll and is logging in from a new country.
- 5Human decides: An analyst reviews, confirms compromise, and resets the supplier's access. AI narrowed 400,000 events to 3 worth reading.
Try it
Which of these are real, documented AI-and-cyber developments?
Criminals have cloned a company director's voice from public video to authorise a fraudulent transfer.
Security teams use machine learning to score login attempts for risk in real time.
An AI model can perfectly guarantee a network will never be breached.
Chatbots have been tricked into revealing internal instructions by hidden text on a web page.
Challenge
Write a short briefing for your head teacher: three ways AI helps attackers and three ways it helps defenders in a school network.
Pick whichever way suits you — every mode earns the same bonus XP.
Write at least 40 more characters to submit.
Mark your own work
Guided walkthrough — 0/3 clues revealed
- Clue 1 locked — reveal it only if you get stuck.
- Clue 2 locked — reveal it only if you get stuck.
- Clue 3 locked — reveal it only if you get stuck.
Each clue costs 4 XP (never below 20 XP). You'd earn 40 XP right now.