Artificial intelligence is transforming cybersecurity on two levels: it makes attacks faster and more targeted, but at the same time opens up new possibilities for defense. Jochen Wargulski, Head of IT Security & Privacy Consulting at Lufthansa Industry Solutions (LHIND), explains why traditional security approaches are increasingly reaching their limits and why people remain indispensable despite all automation.
Mr Wargulski, people keep reading about AI-based cyber attacks. Is the threat really going to be fundamentally different?
Jochen Wargulski: The targets of the attackers have remained the same. It is still about data theft, extortion or sabotage. What is new is the efficiency with which such attacks can be prepared and carried out. AI helps to evaluate publicly available information and derive deceptively real news or scenarios from it. This makes social engineering attacks in particular far more convincing than in the past. Companies must therefore adapt to opponents who work with much higher speed and precision.
Is this above all a technical problem?
Jochen Wargulski: No. As attacks become more and more credible, the human factor becomes even more central. It is crucial that organisations consider this aspect in their defence strategy.
AI can help security teams identify patterns faster and set priorities.
Jochen Wargulski Head of IT Security & Privacy Consulting at Lufthansa Industry Solutions
Today, many companies are gathering vast amounts of security data. Why is that not enough on its own?
Jochen Wargulski: The amount of information available is no longer the real problem. It is more difficult to identify the relevant information in good time. Modern attacks often arise from a series of events that seem completely inconspicuous in their own right. Only when they are linked together does a reliable picture emerge. This is precisely where classic, purely rule-based procedures come up against limits. The key is not the number of alerts, but the ability to make connections visible.
What role does AI play on the defence side?
Jochen Wargulski: AI can help security teams identify patterns faster and set priorities. This is especially important because many attacks today spread in a short period of time. If systems correlate abnormalities early and initiate initial protective measures automatically, this creates valuable scope for action for experts. However, the actual evaluation and responsibility remain with humans. That is why I see AI not as a substitute for security teams, but as a tool that strengthens their ability to act. Sustainable cyber resilience continues to emerge only through the interplay of people, processes and technology.
About Lufthansa Industry Solutions
Lufthansa Industry Solutions is a service provider for IT consulting and system integration. This Lufthansa subsidiary helps its clients with the digital transformation of their companies. Its customer base includes companies both within and outside the Lufthansa Group, as well as more than 300 companies in various lines of business. The company is based in Norderstedt and employs more than 3,000 members of staff at several branch offices in Germany, Albania, Switzerland and the USA.
