June 11, 2026
Thou Shalt Not Make a Machine in the Likeness of a Human Mind: AI, Cybersecurity, and the Monkey’s…
A Warning from Arrakis
Garrett Rook, CISSP
5 min read
A Warning from Arrakis
One of the reasons Frank Herbert's Dune continues to resonate decades after its publication is that it asks questions that remain relevant regardless of technological progress. While many science fiction stories focus on advanced machines, intelligent robots, or futuristic gadgets, Dune is remarkably different.
In Herbert's universe, thinking machines are largely absent. Long before the events of the novels, humanity experienced a cataclysmic conflict known as the Butlerian Jihad, a civilization-shaping event brought about by humanity's dependence on machines that could think and make decisions on its behalf.
The aftermath of that conflict shaped every aspect of human civilization. Rather than relying on artificial intelligence, humanity developed its own capabilities. Mentats replaced computers. Navigators replaced predictive systems. Human beings were trained to perform functions that machines once handled.
At the center of this cultural transformation was a commandment preserved within the Orange Catholic Bible:
"Thou shalt not make a machine in the likeness of a human mind."
For most of my life, that warning felt like an interesting piece of science fiction lore. Today, it feels more like a cautionary tale.
Not because artificial intelligence is about to plunge humanity into some dystopian future, but because Herbert's warning was never really about machines. It was about dependence. It was about what happens when human beings begin delegating judgment, reasoning, and decision-making to systems they do not fully understand.
As businesses race to adopt artificial intelligence, that fictional warning feels increasingly relevant.
The New Gold Rush
Artificial intelligence has become the modern business gold rush. Every conference seems to feature a keynote on AI transformation. Every software vendor is integrating AI into their products. Every LinkedIn feed is filled with promises of increased productivity, reduced costs, and revolutionary efficiency gains. Many of those same LinkedIn posts are even AI-generated themselves.
Business owners are being told that AI can generate leads, write marketing campaigns, answer customer questions, build software, schedule appointments, analyze trends, summarize meetings, and automate countless administrative tasks. In many cases, those claims are completely legitimate. The technology is genuinely impressive, and organizations that learn to leverage it effectively will almost certainly gain advantages over competitors that do not.
The challenge is that we are adopting this technology faster than we understand it.
History has shown repeatedly that transformational technologies often have second-order consequences that are not obvious when they first appear. The internet changed commerce, communication, entertainment, and politics in ways that few people accurately predicted. Social media reshaped society in ways that even its creators did not anticipate.
Artificial intelligence may prove to be even more significant.
The reality is that we know what AI can do for us today. We know far less about what widespread dependence on AI will mean ten or twenty years from now.
The Monkey's Paw
That uncertainty brings to mind another piece of fiction that feels surprisingly relevant.
In W.W. Jacobs' classic story The Monkey's Paw, a magical object grants wishes to its owner. The catch is that every wish comes with consequences. The wish itself is fulfilled, but the outcome arrives in a way the recipient never anticipated.
What appeared to be a blessing reveals itself to be something far more complicated.
Artificial intelligence has many of the characteristics of a modern Monkey's Paw.
Businesses wished for automation, and they received it. They wished for intelligence on demand, and they received it. They wished for tools capable of reducing workload, eliminating repetitive tasks, and helping small teams accomplish the work of much larger organizations.
Those wishes have largely been granted.
But there is an important detail many organizations overlook:
The wish was not granted exclusively to them.
Everyone received the same gift.
Including the people trying to steal from them.
Imagine an Oracle
Imagine, for a moment, that you had access to an Oracle.
Not the software company. An actual oracle.
Imagine a digital assistant capable of performing nearly any knowledge-based task you ask of it. It books appointments. Generates leads. Writes code. Drafts emails. Summarizes reports. Conducts research. Creates marketing campaigns. Organizes information. Answers questions.
For most business owners, such a tool would feel almost magical.
Many organizations are already discovering that reality firsthand.
Now imagine that same Oracle belongs to your adversary.
Imagine it belongs to a cybercriminal. A scammer. An organized crime group halfway around the world.
Suddenly, that Oracle can research your business, identify key employees, generate convincing phishing campaigns, imitate legitimate communication styles, and automate portions of its operation at a speed no human team could match on its own.
The technology itself has not changed.
Powerful tools rarely remain in the hands of only one side.
The End of Flying Under the Radar
For years, many small and medium-sized businesses operated under a fairly common assumption:
"We're too small to be targeted."
To be fair, there was some truth to that.
Cybercrime required effort. Attackers had limited resources and generally focused on opportunities that produced the greatest return. Large enterprises often represented more attractive targets than a local business with twenty employees.
Artificial intelligence is changing that equation.
By reducing the time and effort required to conduct research, generate communications, and automate portions of attack campaigns, AI allows attackers to operate at a scale that was previously impractical.
Small businesses are not necessarily becoming more valuable targets.
They are becoming easier targets to include.
That distinction matters because the economics of cybercrime are changing. The barrier to entry is lower, the cost of operation is lower, and the number of organizations that can be targeted simultaneously is higher.
For many SMBs, obscurity is no longer a meaningful security strategy.
The Democratization of Cybercrime
One of the most significant consequences of AI is the democratization of capability.
Historically, effective cyberattacks required meaningful technical expertise. Attackers needed to understand systems, infrastructure, communication strategies, and social engineering techniques. Those requirements naturally limited participation.
Artificial intelligence lowers many of those barriers.
It helps inexperienced attackers create more convincing communications. It assists with research. It improves planning. It amplifies the effectiveness of people who previously lacked the skills to operate at that level.
The result is not necessarily that elite attackers become dramatically more dangerous.
The larger shift is that average attackers become more capable.
For organizations, this means the threat landscape becomes broader. Cybersecurity risk is not determined solely by how sophisticated attackers are. It is also determined by how many attackers can now participate effectively.
A world containing ten thousand AI-assisted attackers presents a very different challenge than a world containing a handful of highly skilled ones.
What We Still Don't Know
Perhaps the most important reality is that we are still in the early chapters of this story.
Artificial intelligence is reshaping business, education, communication, and cybersecurity simultaneously. We are actively integrating it into our organizations while still trying to understand its long-term implications.
That does not mean businesses should reject AI. Quite the opposite. Organizations that ignore it entirely will likely find themselves at a competitive disadvantage.
But there is a meaningful difference between using a tool and becoming dependent upon it.
That distinction sits at the heart of Herbert's warning.
The Butlerian Question
The Orange Catholic Bible's commandment was never really about technology.
It was about maintaining human judgment in a world increasingly tempted to surrender it.
Artificial intelligence is already transforming the way businesses operate, and there is every reason to believe that transformation will continue. The same technology helping organizations become more efficient is helping attackers become more efficient. The same systems streamlining business operations are also streamlining cybercrime.
The question, then, is not whether AI is good or bad.
The question is whether we are taking the time to understand the consequences of a technology that is changing the landscape around us faster than we can fully comprehend it.
Businesses are rightly focused on what AI can do for them.
They should spend equal time considering what it enables others to do against them.
Because while we are still debating what artificial intelligence ultimately means for society, it is already changing the cybersecurity landscape in very real ways. And by the time we fully understand its long-term implications, those changes may already be permanent.