· Zahra-Rose Moussa · Events · 2 min read
The AI revolution powering cybercriminals
At Sydney's Cloudflare Immerse Event, cybersecurity expert Matt O'Kane revealed how artificial intelligence has transformed the criminal underworld into a lightning-fast threat machine.
The era of cybercriminals taking days to plan and execute attacks is over. At Sydney’s Cloudflare Immerse Event on 4 September 2025, cybersecurity expert Matt O’Kane revealed how artificial intelligence has transformed the criminal underworld into a lightning-fast threat machine.
His presentation, titled “Days to Minutes,” opened with a chilling statistic: Cloudflare observed an attempted exploitation of a new zero-day vulnerability just 22 minutes after its proof-of-concept was published online.
O’Kane’s analysis of 2025 cybercriminal trends painted a picture of criminals using artificial intelligence to supercharge their operations against businesses. The traditional multi-day planning cycles that once gave security teams precious time to prepare and respond have been obliterated by AI-enhanced attack capabilities.
“We thought we had time to detect cybercriminals, time to respond, time to prepare. Well, we were wrong. Today, that multi-day delay has compressed to hours.”
Modern AI-powered ransomware operators have evolved beyond brute-force encryption tactics. Additionally, cyber criminals are now operating as businesses with services like ‘tech’ support. Instead of laboriously encrypting entire systems, they now employ sophisticated deception stealing selective data while fabricating evidence of more extensive breaches. This psychological warfare approach maximises impact while minimising effort, a hallmark of AI-optimised criminal operations.
O’Kane outlined how today’s AI-enhanced attackers source their intelligence through three increasingly sophisticated levels: public exploitation of openly disclosed vulnerabilities, dark web networks accessing criminal marketplaces for tools and intelligence, and advanced research conducting original reverse engineering and using insider knowledge.
O’Kane emphasised that businesses face an unprecedented challenge. He maintained his firm stance against ransom payments, arguing they fuel the AI arms race by funding criminal innovation. As AI continues to evolve, O’Kane’s message is clear: the window for detection and response is not measured in days anymore. It is measured in minutes.