Report | AI Security Report 2025 | Check Point Software
Report | AI Security Report 2025
Table of Contents
01 INTRODUCTION
02 AI THREATS
03 AI FOR ENTERPRISES
04 AI FOR RESEARCH
05 SECURITY FOR, BY & WITH AI
01 INTRODUCTION
The Accelerating Future of AI for Cyber Offenders and Defenders
AI is revolutionizing industries, and cyber crime and cyber security are no different. Adopting AI in enterprises—and unfortunately by threat actors as well—enhances efficiency, scale, and impact. At this point in time, we believe it’s essential to pause and assess the current state and future of AI and cyber security. How are attackers using AI, and what comes next? As cyber defenders, how can we leverage AI to enhance our security efforts and protect our organizations more effectively? These are the questions addressed in the first edition of the Check Point Research AI Security Report.
Our focus zeroes in on:
- The rise of autonomous and interactive social engineering across text, audio, and video
- The jailbreaking and weaponization of LLMs
- The automation of malware development and data mining
- AI adoption in enterprises and their associated risks
- The emergence of data poisoning in the wild and large-scale disinformation amplified by GenAI tools
- The AI tools that fight fire with fire - protecting your organization from the most advanced threats
AI threats are no longer theoretical—they're here and evolving rapidly. As access to AI tools becomes more widespread, threat actors exploit this shift in two key ways: by leveraging AI to enhance their capabilities and targeting organizations and individuals adopting AI technologies. The following pages provide a comprehensive understanding of these threats, allowing readers to navigate the intricate landscape of AI security. To a secure future of innovation and success,
Lotem Finkelstein, Director of Check Point Research
02 AI THREATS
THE AI MODELS USED BY CYBER CRIMINALS
Cyber criminals are closely monitoring trends in mainstream AI adoption. Whenever a new large language model (LLM) is released to the public, underground actors quickly test its potential for misuse (figure 1). Currently, ChatGPT and OpenAI’s API are the most popular models for cyber criminals, while others like Google Gemini, Microsoft Copilot, and Anthropic Claude are quickly gaining popularity. The landscape is changing with the launch of open-source models like DeepSeek and Qwen by Alibaba. These models enhance accessibility, have minimal usage restrictions, and are available in free tiers, making them a key asset to crime.
Figure 1 – Underground forum discussion on harnessing DeepSeek for malware development