LUCAMEMicrosoft's security researchers have been tracking how North Korean state-backed threat actors are weaving AI tools into their attack methods. The short version is that they're using AI to work faster and more efficiently across different parts of their operations. It's not a sudden leap, but adoption is growing and it's making these groups more capable than they were.
What this means for your business
For a small or mid-sized UK business, this matters because AI-assisted attacks are harder to spot and arrive more quickly than traditional ones. Phishing emails look more convincing, reconnaissance happens faster, and the usual warning signs are less reliable. Make sure your staff know that a well-written email isn't a safe one, and if you're not already running email filtering and endpoint detection tools, now is a good time to sort that out.