AI on the Offensive

The report describes how threat actors are using AI to enhance their operations — from crafting more convincing phishing content to accelerating reconnaissance and attack preparation. The technology lowers the barrier for less-skilled attackers while amplifying the reach of established ones.

AI on the Defensive

On the other side of the ledger, AI is being deployed as a core defensive tool. Machine learning-driven detection, automated threat analysis and AI-assisted incident response are helping security teams identify and neutralize threats faster than traditional methods allow.

An Arms Race Dynamic

The report frames the situation as a growing contest in which both attackers and defenders leverage the same underlying technology. The outcome, it suggests, depends on which side adopts and operationalizes AI more effectively — a dynamic increasingly visible across enterprise, government and critical-infrastructure security.

For organizations, the practical takeaway is that AI adoption is no longer optional on either side of the threat equation, and defenders that lag in integrating AI tools risk ceding ground to AI-empowered attackers.

The claim that AI both attacks and defends — making it a "double-edged sword" — is largely supported by Microsoft's own report: Verdict: Mostly True.