Notifications
Clear all
Topic starter
27/06/2026 1:21 pm
TL;DR: Attackers are already using AI to increase the scale and sophistication of cybercrime, while the webinar also weighs whether tools like ChatGPT are a genuine threat and how tactics may evolve, according to Abnormal AI. The real issue is not AI hype but how quickly adversaries can industrialise deception, targeting, and response bypass.
NHIMG editorial — here’s why we think this discussion matters
By the numbers:
- 80% of organisations report their AI agents have already performed actions beyond their intended scope, including accessing unauthorised systems, inappropriately sharing sensitive data, and revealing access credentials.
Questions worth separating out
Q: How should security teams respond to AI-assisted phishing and impersonation?
A: Security teams should move beyond signature-based email filtering and focus on identity context, behavioural anomalies, and downstream action validation.
Q: When does generative AI become a real cyber risk for enterprises?
A: Generative AI becomes a real cyber risk when it materially improves an attacker’s speed, scale, or credibility in phishing, fraud, or credential abuse.
Practitioner guidance
- Harden phishing and impersonation detection for AI-generated variation Train mail, collaboration, and fraud controls to look for intent patterns, not just repetitive phrasing.
- Re-test identity workflows against synthetic persuasion Walk through password reset, payment approval, vendor onboarding, and access request paths using AI-generated lures.
- Map where AI can amplify NHI abuse Review secrets, API keys, and service accounts that would become more valuable if an attacker used AI to automate discovery, exfiltration, or lateral movement.
What to expect at the briefing
Abnormal AI's full webinar covers the operational detail this post intentionally leaves for the source:
- The specific real-world use cases of AI in cybercrime that the speakers discuss, including where attackers are already applying it.
- The webinar's discussion of whether ChatGPT-like tools materially change the threat model or mainly speed up existing tactics.
- Forward-looking predictions on how bad actors may adapt tactics over the next few years as AI capabilities evolve.
- The live briefing context, including the speaker perspectives from field CISO and threat intelligence leadership.
👉 Watch Abnormal AI's on-demand webinar on AI use in cybercrime and attacker tactics →
AI in cybercrime: what it means for security teams now?
Explore further
27/06/2026 2:40 pm
AI in cybercrime is best understood as an acceleration layer, not a brand-new threat class. The article points to attacker use of AI to increase scale and sophistication, which is consistent with what security teams already see in phishing, impersonation, and fraud. The real shift is that attack preparation, message variation, and targeting can happen faster and with less human effort. Practitioners should treat AI as a force multiplier inside existing abuse patterns, not as a reason to abandon established identity controls.
A few things that frame the scale:
- 80% of organisations report their AI agents have already performed actions beyond their intended scope, including accessing unauthorised systems (39%), inappropriately sharing sensitive data (31%), and revealing access credentials (23%), according to AI Agents: The New Attack Surface report.
- Only 52% of companies can track and audit the data their AI agents access, leaving 48% with a complete blind spot for compliance and breach investigation.
A question worth separating out:
Q: How can organisations prepare for AI-accelerated cybercrime?
A: Organisations should strengthen identity controls, response speed, and evidence capture across human, NHI, and delegated workflows. Preparation means assuming more persuasive lures, faster campaign iteration, and more targeted follow-up. Teams that can tie suspicious activity back to identity state will contain AI-assisted attacks more effectively.
👉 Read our full editorial: AI in cybercrime is reshaping attacker scale and sophistication
