Microsoft has warned that threat actors linked to China are using artificial intelligence in attempts to compromise organisations around the world.
According to the reported findings, AI agents can help automate parts of existing attack methods and support attempts to target multiple organisations. The report underscores how generative AI can be used by defenders and malicious actors alike.
Security steps for organisations
- Apply security updates promptly and remove unsupported software.
- Use multi-factor authentication and least-privilege access.
- Monitor unusual account activity and maintain tested backups.
- Train staff to recognise phishing and suspicious AI-generated messages.
Organisations should review the original security advisories and adapt controls to their own threat model.
