ASEAN Faces a Fragmented Security Reality in the Age of AI

The threat landscape is shifting as technical knowledge and hostile experimentation converge. While ransomware groups leak blueprints from critical infrastructure like India’s Kudankulam Nuclear Power Plant, extremist networks in Nigeria are reportedly testing frontier AI for battlefield planning. These developments reveal how stolen data, once siloed, can be synthesized into operational intelligence by automated systems, bypassing traditional institutional defenses.

ASEAN currently manages these risks through disconnected mandates, with defense, cybersecurity, and counterterrorism bodies operating in isolation. This creates a "custodial bias," where agencies are equipped to protect systems they own but lack the capacity to respond to threats directed from outside their jurisdiction. Because AI-enabled operations move faster than consensus-based diplomacy, a breach might be categorized as a corporate issue in one country, a cyber incident in another, and a security threat in a third, preventing a unified response until the damage is done.

To bridge this gap, the region must move toward shared capacity rather than redundant, state-level defense. By pooling expertise in forensic analysis, threat-indicator repositories, and cross-pillar assessment mechanisms, ASEAN could isolate early signals of an attack before full attribution is possible. The goal is to establish protocols for voluntary intelligence sharing and containment that function independently of political consensus. If the region fails to integrate these capabilities, it risks becoming a recurring proof of concept for global actors testing the limits of automated, cross-border disruption.