See more of Dutch Brief in your Google search results
Artificial intelligence is enabling faster, larger, and more accessible cyberattacks, expanding the pool of potential attackers. Seven Dutch government and security organisations have jointly urged business and institutional leaders to prioritise cybersecurity.
Issuing Organisations and Key Messages
The statement is signed by the General Intelligence and Security Service (AIVD), the Military Intelligence and Security Service (MIVD), the National Coordinator for Counterterrorism and Security (NCTV), the National Cyber Security Centre (NCSC), the police, the Public Prosecution Service (OM), and CIO Rijk, the central government’s IT organisation.
Their main message is that AI “accelerates and enlarges” the threat. Attackers primarily use AI to automate, expedite, and refine their methods, making attacks more sophisticated and harder to detect. AI also enables faster identification and exploitation of vulnerabilities.
Lowering the Barrier to Entry
The key concern is that AI lowers the threshold for conducting cyberattacks. Previously, advanced attacks required significant skill and resources; now, AI enables a wider range of individuals to carry them out. The agencies emphasise that attackers do not need the most advanced AI models to cause harm; commonly available AI tools are already sufficient.
In practice, attackers use AI to develop malicious software (malware) that steals or encrypts data and to create convincing phishing emails that deceive individuals into revealing passwords or personal information. This trend aligns with earlier findings from Dutch investigators, whose report noted that ready-made tools and AI are enabling even inexperienced criminals to conduct complex attacks.
SPONSORED
You’re overpaying your accountant. And they still don’t call you back.
Neno gives you a dedicated bookkeeper, automated admin, real-time financial insights and a free business bank account. Everything your business needs, in one place.
No chasing. No surprises. No unnecessary costs.
A message for boardrooms
The joint public appeal aims to shift responsibility for digital resilience beyond IT departments and security specialists. In an open letter, the organisations urge directors and executives to “take responsibility and give priority to cybersecurity,” emphasising that it is a leadership issue, not one to be delegated or overlooked.
The consequences of inadequate cybersecurity are well known. Agencies highlight prolonged outages of critical systems after breaches and the impact on citizens whose personal data is stolen, reflecting recent data breaches affecting Dutch companies and customers. They also note that some damage may only become apparent long after an initial incident.
Their advice is practical: keep systems updated, address known vulnerabilities promptly, and integrate security into organisational operations. As attack tools become more accessible and affordable, they stress that defence must keep pace.