Yes, AI is coming to the world of cybersecurity. We are already seeing it being used on both sides to a limited extent. It is what we will all be talking about in the next few years. It holds unimaginable risks and opportunities!
Attribution has and will always be a problem, unless you are meeting someone you know face-to-face. It is especially difficult when trading bits/bytes over networks never designed for security (everything has been bolted on to the Internet). But that does not mean all is lost. This is chess game. There are limitations and each side can maneuver. Don't discount what will be possible in the future. I don't ever expect a total 'win' by either side, but the game will get more intense and there are so many surprises ahead. It will be a bumpy and exciting ride!