Staying ahead of threat actors in the age of AI

Microsoft and OpenAI published joint research analyzing how multiple nation-state and cybercriminal threat actors have been experimenting with LLMs to augment reconnaissance, social engineering, scripting, vulnerability research, and evasion techniques; the report profiles several APTs (e.g., Forest Blizzard/STRONTIUM, Emerald Sleet/THALLIUM, Crimson Sandstorm/CURIUM, Charcoal Typhoon/CHROMIUM, Salmon Typhoon/SODIUM), maps LLM-themed TTPs for MITRE frameworks, and states that while exploratory use was observed, no widespread novel AI-enabled attacks were detected and associated accounts were disabled.