Manage attack infrastructure? AI agents can now help

AI agents are being used by cybercriminals and nation-state actors to automate the tedious operational work of cyberattacks, according to Microsoft's GM of global threat intelligence Sherrod DeGrippo. This includes automated reconnaissance, standing up and managing attack infrastructure at scale, and generating malware. North Korea's Coral Sleet group has been observed using development platforms to rapidly create and manage attack infrastructure. While AI-generated malware is still detectable and lags behind human-written code, the more sophisticated use case involves malware that calls AI functions and libraries directly. These capabilities lower the barrier for less technical criminals and accelerate attack timelines.