Jakarta. Indonesia’s digital economy is accelerating like a fully loaded merchant ship racing through open waters. That ship carries valuable “cargo”: national digital transactions, which soared to Rp 59.4 trillion ($3.6 billion), or roughly three times Indonesia’s GDP. But speed invites danger. The faster this ship moves, the more it attracts “pirates” -- cybercriminals from every direction. Today, the threat is no longer a handful of hostile vessels but a fleet: more than 3.64 billion traffic anomalies detected in just the first seven months of 2025.

Conventional cybersecurity tools offer little protection against attacks of this scale. Indonesia needs more than additional guards; it requires an intelligent “captain” standing atop a watchtower -- one who can not only scan the horizon but instantly distinguish harmless waves from incoming torpedoes. That kind of visibility requires turning billions of data points into precise, actionable insight. This is where Artificial Intelligence (AI) becomes indispensable. AI enables Indonesia’s “merchant ship” to reach its destination safely, securely, and without losing its treasure.

Increasingly Precise and Mutating Threats
As Indonesia’s digital ecosystem expands, cyberattacks grow more targeted and sophisticated. More than 133 million attack attempts were recorded in the first half of 2025 -- an average of nine attacks every second. These attacks are no longer random. Threat actors now systematically exploit disclosed Common Vulnerabilities and Exposures (CVE) to deploy ransomware, extract sensitive data, or bypass existing defenses.

One of the most dominant attacks, Generic Protocol Command Decode (68.37 percent), can bypass traditional signature-based systems. This shows that modern threats cannot be stopped by old signatures alone. Attackers constantly repackage malicious code, alter traffic patterns, and build new variants engineered to evade detection.

The geography of threats is also shifting. Attacks originating abroad -- particularly from China and the United States -- remain high. However, the 2.35 percent increase in domestic attacks deserves urgent attention. These threats often come from infected local devices or poorly secured home and small business routers. Many users still fail to install security patches or change default passwords. Weak digital awareness at home is now a national exposure.

From Raw Data to Cyber Intelligence
Every second, billions of logs are created; every minute, thousands of anomalies emerge. AI is the only technology capable of parsing this volume and complexity at speed. Machine learning rapidly examines scans, network traffic, and metadata. Behavioral analytics allows AI to identify suspicious activity without relying on static signatures, making it possible to detect new malware variants and protocol manipulation techniques.

Predictive models then map threat evolution and highlight vulnerable sectors. These capabilities support investigations under the ITE Law, PDP Law, and other cybersecurity mandates.

For organizations pursuing or maintaining ISO 27001 certification, AI-powered Cyber Threat Intelligence (CTI) is now a core requirement. It enables institutions to demonstrate comprehensive, internationally aligned security controls.

Building Digital Resilience with AI-Powered Threat Intelligence
Many organizations still depend on reactive strategies. Such defenses are no longer effective in a world where attacks occur every second and threat actors rely on automation and mutation. The era of reactive cybersecurity is over.

Digital resilience must be proactive. Data must serve not merely as numbers, but as a threat roadmap showing how attacks evolve, which techniques dominate, and where vulnerabilities are likely to emerge. With this visibility, defenses can be prepared long before an attack reaches critical systems.

Public institutions use threat intelligence to protect national infrastructure. Private companies use it to avoid service disruptions, data leaks, legal liabilities, and reputational loss. AI is not merely a security tool; it is a strategic asset that ensures business continuity and stable operations.

AI-Powered Threat Intelligence Should Be a National Priority
AI has become the central architect of cybersecurity amid a surge of relentless attacks. It transforms enormous anomalies into precise intelligence, enhances detection capabilities, and sharpens response decisions. AI forms an integrated defense layer that sustains Indonesia’s digital growth.

Governments and organizations must place AI-driven threat intelligence at the top of their security agendas. Without intelligence-based protection, Indonesia’s “merchant ship” risks running aground, losing its cargo, and failing to reach the destination of digital prosperity.

---
Yudhi Kukuh is the founder of AwanPintar.id®, an Indonesian threat intelligence platform.
The views expressed in this article are those of the author.