Artificial intelligence is increasingly being used not only for protecting computer networks but also by attackers. In 2025, AI agent and agent browser traffic grew by 7851% year-over-year — almost 80 times. Over the same period, AI-driven traffic increased by 187%. These figures are reported by Human Security.
According to analysts, the problem lies not only in chatbots that generate texts. AI agents are capable of independently navigating websites and performing sequences of actions. Therefore, they are increasingly used for automated information gathering and searching for potential entry points.
In Russia, malicious bots also account for a significant share of internet traffic. According to F6, in 2025, malicious bot attacks accounted for 41% of traffic on protected Russian resources, compared to 30% in 2023. The company notes that attackers are increasingly acting directly against web applications.
AI is also directly used in phishing. According to a KnowBe4 study, AI was used in approximately 86% of analyzed phishing campaigns over the past six months. Neural networks help attackers make messages more personalized and automate the collection of information about potential victims.
However, the same technologies are also used for protection. Positive Technologies reports that in pilot projects, its AI assistant PT Naira accelerated incident investigation by 50–60%. The system helps analysts examine suspicious processes and commands, assess the importance of events, and prepare rules for SIEM.
In Russia, AI is already used in network traffic analysis systems, SIEM, and other information security tools. However, the question remains not only how well a neural network can find threats, but also what authority it can be granted.
The more actions a system can perform independently, the higher the requirements for controlling its operation. Therefore, market participants interviewed by Kommersant specifically note the difference between AI that offers a solution to a specialist and a system that is given the ability to act independently within corporate infrastructure.