Follow the SCRIPT: Why Attackers are Winning the AI Arms Race

The report introduces the SCRIPT framework to explain why AI currently advantages attackers over defenders in cybersecurity, highlighting two key asymmetries: attackers need minimal context and can tolerate errors, while defenders require rich organizational context and high accuracy. Using examples like lateral movement, phishing, and vulnerability management, it shows how AI amplifies these gaps and recommends architectural changes—MFA, deception/honeypots, step-up authentication, least privilege, and micro-segmentation—to reduce attacker automation and permissiveness while increasing defenders’ tolerance and simplifying detection.