The Dragon, the Wall and the dagger: inside AI’s Game of Throne
By Seun Kolade
A major cybersecurity alarm has swept across the internet over the past 24 hours. Researchers using advanced AI have uncovered two critical, long-standing vulnerabilities in PHP, a programming language underpinning nearly 70% of the world’s websites. The flaws could allow attackers to take control of affected servers or access sensitive information. Governments and organisations across several countries have temporarily taken websites offline as emergency security patches are deployed. The extraordinary irony? AI helped researchers discover these vulnerabilities, but the same technology could potentially help attackers exploit them at unprecedented speed.
The unfolding drama reminds me of one of the most memorable sequences in Game of Thrones. Beyond the Wall, the Night King struck down Viserion, one of Daenerys Targaryen’s three dragons, with an ice spear. The mighty dragon plunged into a frozen lake. But that was not the end. The Night King subsequently resurrected Viserion, transforming him into a terrifying undead dragon breathing blue fire. And what was the first major act of this transformed dragon? It destroyed a section of the Wall at Eastwatch, the ancient bulwark that had protected the realm of the living against the White Walkers for thousands of years. With the Wall breached, the Army of the Dead marched through.
The symbolism is uncanny. A formidable source of power, captured and turned into an offensive weapon, was deployed to destroy a long-established security architecture. Fast-forward to the Battle of Winterfell, during the Long Night. The resurrected Viserion confronted the living dragons, Drogon and Rhaegal, in a spectacular clash of fire and fury. Dragon against dragon, power against power, with the fate of humanity hanging in the balance.
Yet, in the end, it was neither dragon that decided the battle. It was Arya Stark, a human armed with a small Valyrian-steel dagger, who delivered the decisive blow against the Night King, bringing the Long Night to an end. Her victory was not about superior firepower. It was about preparation, courage, ingenuity, precision and the intelligent deployment of the right tool at the critical moment.
In an editorial I recently led with fellow guest editors for a special issue of Information Systems Frontiers on cyber risk and value destruction, we advance a related argument: the same digital infrastructures that enable value creation can also become channels for value destruction. Cyber resilience, therefore, cannot be secured through increasingly sophisticated technical defences alone. It requires human ingenuity, organisational learning, trusted relationships and adaptive governance. Ultimately, the strength of our defences depends as much on the people and institutions behind them as on the technologies themselves.
As offensive and defensive AI capabilities become increasingly sophisticated, cybersecurity risks becoming an escalating battle of digital dragons, each more powerful than the last. But perhaps the lesson from Winterfell is that technological superiority alone will not determine the outcome. Human judgment, strategic foresight, coordinated action and the intelligent use of technology will remain indispensable.
In a world of increasingly powerful digital dragons, we must never underestimate the human hand that wields the dagger.