LLMs Lower Transition Costs Without Removing Trust Boundaries

An appealing diagram of cybersecurity shows a user, a service, data and an attacker. The attacker reaches the service. The user consumes it. The service stores or processes the data. Add artificial intelligence and, at the most abstract level, none of these relationships disappears.

Users still authenticate. Services still expose interfaces. Data still crosses trust boundaries. Identities, permissions, vulnerabilities and attack paths still matter. In that limited sense, the claim AI does not fundamentally change this is correct.

But it misses the more interesting change.

AI does not need to redraw the security map to transform security. It can change the cost of moving through the map. Large language models let people enter unfamiliar technical domains, connect fragments of knowledge and acquire enough operational capability to continue where they would previously have stopped. The nominal attack surface may look familiar while the population able to navigate it grows.

The Map Remains

Security architecture is built around relationships that predate LLMs:

• an identity requests an operation;
• a service decides whether to permit it;
• data moves between components;
• code transforms state;
• a boundary separates one authority from another;
• an attacker searches for a sequence of permitted, unintended or vulnerable transitions.

AI does not abolish those invariants. A model cannot make an unavailable network route exist merely by describing it. It cannot turn an unexposed credential into an exposed one by rhetoric alone. A successful intrusion still needs a path through real systems.

This is why established threat models remain useful. MITRE ATT&CK, for example, describes adversarial behaviour as tactics and techniques that form operational sequences. AI may support parts of those sequences, but the sequence still has to interact with concrete identities, hosts, services and controls.

The mistake is to conclude that an unchanged abstract structure implies an unchanged risk landscape.

AI Changes the Cost of Moving Through It

Before LLMs, crossing from one knowledge domain into another often required substantial transition work. A developer who understood a web application but not identity infrastructure might need days or weeks to read documentation, learn vocabulary, interpret errors and assemble a working mental model.

We can represent that transition as:

[ K_A \xrightarrow[\text{weeks or months}]{\text{expertise}} K_B ]

With an LLM, the transition may become:

[ K_A \xrightarrow[\text{minutes}]{\text{LLM}} \widetilde{K_B} ]

The tilde matters. The person has not necessarily acquired deep expertise in domain (K_B). They may nevertheless possess enough working capability to generate code, interpret documentation, return an error to the model, revise a command and keep moving.

This is more than faster search. Search retrieves documents. A conversational model can translate between vocabularies, propose the next action and adapt its explanation to feedback. It acts as a bridge across transitions that previously filtered out people lacking patience, training or local expertise.

The UK’s National Cyber Security Centre describes a related effect in its assessment of AI and cyber threats: AI is expected to increase the capability of threat actors and lower barriers to entry, even while the most advanced operations continue to depend on expertise and resources. The key point is not that every novice becomes an elite operator. It is that some transitions become cheaper for many actors.

Capability Is Not Understanding

The phrase that captures this shift is accelerating growth of capabilities, not necessarily understanding.

Operational competence can arrive before a reliable mental model. Someone may be able to:

• produce a script without understanding every dependency;
• adapt a proof of concept without knowing why it fails in another environment;
• connect tools across cloud, identity and application domains;
• follow a troubleshooting loop until an action succeeds;
• automate a process whose wider consequences remain opaque.

This asymmetry is useful and dangerous. It enables legitimate experimentation, learning and defensive work. It also allows action to outrun judgment.

Deep understanding still matters at the hard edges: recognising an unusual architecture, constructing a novel exploit, maintaining stealth, interpreting ambiguous evidence or recovering when the model’s advice is confidently wrong. LLMs do not remove these difficulties. They alter how far a person can travel before those difficulties become decisive.

The Navigable Security Space Expands

Consider a security environment as a graph:

[ G = (V, E, c) ]

Here, (V) contains systems, identities, data and relevant knowledge states. (E) contains possible transitions: API calls, privilege changes, lateral movement, code execution or even the acquisition of knowledge needed for the next step. The function (c(e)) represents the cost of a transition in time, expertise, access, money and risk.

An LLM does not have to add a new vertex or edge. Reducing (c(e)) is enough to change which paths are viable for a given actor.

That distinction separates the nominal state space from the practically navigable state space. A path may always have existed in principle but remained irrelevant because too few people could discover, understand and operationalise it. Once the transition cost falls, the path becomes reachable to a larger population.

The topology of actual capability changes even when the architecture diagram does not.

This also changes scale. Lower costs can make personalised reconnaissance, code adaptation and iterative troubleshooting economical across more targets. The near-term effect may therefore appear less as entirely new classes of attacks and more as greater volume, faster adaptation and more competent combinations of known techniques.

The Defender Gets the Same Instrument

The effect is not exclusively offensive. Defenders can use LLMs to cross the same boundaries: from an alert into unfamiliar application code, from a cloud event into an identity policy, or from a vulnerability report into a proposed detection query.

Defenders also possess an important advantage: internal context. They can potentially connect a model to inventories, logs, architecture decisions and known-good behaviour unavailable to an outsider.

Yet this advantage is not automatic. Unstructured context, weak permissions, unreliable automation and missing evaluation can turn an assistant into another source of plausible noise. As argued in LLMs Expand Possibilities—Knowledge Eliminates Errors , generation widens the candidate space; evidence and constraints must still eliminate incorrect paths.

The strategic contest is therefore not simply model against model. It is the quality of the surrounding navigation system:

Security Becomes Epistemic Navigation

When detailed knowledge can be partially synthesised on demand, meta-knowledge becomes more valuable. The decisive questions are increasingly:

• Which domain do I need to enter?
• What question would reveal the next boundary?
• Which answer is suspiciously convenient?
• What dependency has been omitted?
• Where does authority actually change?
• What observation would falsify this result?

This is a shift from knowledge acquisition toward epistemic navigation. It does not make domain knowledge obsolete. It changes what expert knowledge does: experts identify consequential distinctions, recognise when a model is crossing domains too casually and know which invariant must survive the transition.

The practical design question for cybersecurity is therefore not only, What capabilities exist? It is:

Which capabilities have become reachable to additional actors because AI reduced the cost of the path—and which controls were designed under the assumption that the path would remain expensive?

The old security diagram is still valid. It is simply static. AI changes the distribution of movement across it: who can navigate, how quickly they can recover from a wrong turn and how many paths they can attempt.

That is not the disappearance of cybersecurity’s fundamentals. It is a change in their operational topology.