by Paul Lekas and Bethany Abbate

To date, while much discourse on malicious use of generative AI has been largely speculative, a recent report from Google, Adversarial Misuse of Generative AI, provides a glimpse into real world national security threats involving generative AI. 

The report details efforts by government-backed threat actors to misuse AI for malicious cyber and information operations purposes. Cybercriminals in China, for example, have used AI products to conduct reconnaissance and streamline research to find vulnerable targets. In Iran, government-backed actors have leveraged generative AI models to launch large-scale phishing attacks targeting Americans. Russia-backed actors have used AI to enhance malware attacks against U.S. organizations. 

While U.S. companies remain well-positioned to counter these security threats, the extensive activity of state-backed malicious actors is cause for concern. As threat actors become more sophisticated and AI tools become increasingly powerful, our national and economic security require a coordinated public-private effort to protect the digital ecosystem. U.S. policymakers must invest in AI and cyber to maintain the current lead our nation has over cyber threat actors and secure the future of national security. This will require a strong partnership between the federal government and the private sector in different areas – from investments in R&D to trade policy – to power innovation and protect American consumers. 

Part of this is tapping into the range of tools the federal government has to counter state-backed malicious actors. Strategic use of export controls, tariffs, and sanctions, along with improving mechanisms for public-private information sharing and coordinated action with like-minded nations are fundamental. Public sector support for the build out of infrastructure like data centers is imperative for the United States to maintain the edge in AI and cyber and stay ahead of threat actors.

Additionally, it is essential for the federal government to rethink how it adopts and deploys new technologies.  AI has immense potential to strengthen national security capabilities while improving efficiency and reducing costs – but only if agencies can acquire and integrate it effectively. However, outdated procurement processes continue to slow down the adoption of AI and cloud technologies essential to raise the government’s capabilities. Without reforms that make it easier for agencies to acquire cutting-edge tools and reduce reliance on outdated legacy vendors, government operations will continue to lag behind the private sector and miss out on critical innovations.

The U.S. cannot afford to take its AI and cybersecurity leadership for granted. To remain competitive in an era of rising cyber threats and adversarial misuse of AI, policymakers must prioritize AI investment, streamline procurement processes, and foster collaboration between government and industry. SIIA continues to advocate for policies that ensure the U.S. remains a global leader in AI innovation and cybersecurity. By prioritizing forward-thinking policy solutions that balance security, economic growth, and technological advancement, we can safeguard both American consumers and national security interests in the digital age.

The time to act is now. Ensuring the U.S. stays ahead of emerging threats requires a commitment to policies that fuel AI innovation rather than hinder it. As adversaries increasingly leverage AI to enhance their cyber operations, we must double down on what has long been America’s strength as a global leader of the technology sector.