October DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsPC HealthRecommendedCrashes, freezes, slowdowns? Check your PC nowSpot repairable issues before they interrupt work.Check PCOctober DealsAmazon USDeal season is back - check today's better picksAmazon US: current deals, useful picks and tech finds.See Picks×
Skip to content
World desk5 min

How AI Is Changing Cyberattacks—and What Defenses Still Work

AI is amplifying familiar cyberattacks and creating new risks for AI systems. Here are the layered defenses that still matter, from stronger identity controls to safer AI agents.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

AI is making familiar cyberattacks easier to scale, personalize and polish—not making every attack autonomous or replacing conventional intrusion methods. It can help with phishing, impersonation, reconnaissance and technical tasks, while AI products themselves create new risks such as prompt injection and data exposure. For organizations and individuals, the practical response is layered protection: strengthen identity controls, verify unusual requests, patch exposed systems and govern AI tools and agents.

How AI is changing cyberattacks

Microsoft describes the use of AI to enhance traditional attacks and automate time-consuming work as “cyberattack augmentation.” Its Digital Defense Report 2025 lists activities that include drafting and translating messages, researching targets, scanning open sources, generating code and malware, and automating parts of an operation. These are reported capability areas, not proof that every attacker uses AI or that each task is widespread, reliable or fully automated.

As an Amazon Associate I earn from qualifying purchases.

More convincing social engineering at greater scale

Generative tools can help attackers write fluent messages, translate lures and tailor them to a person or organization. Deepfakes and synthetic identities can add another layer of impersonation. A polished email or natural-sounding voice is not, by itself, evidence that AI was used—and spelling mistakes are no longer a dependable warning sign. The consequential question is whether the request and the sender’s identity have been verified.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Faster research and technical assistance

Microsoft also identifies open-source scanning, code generation and debugging, exploit and tool development, malware generation, and payload obfuscation as areas where AI may augment attacker work. AI can also assist with operational workflows such as credential discovery, data theft, lateral movement or command-and-control management. Treat these as potential forms of assistance, not as a claim that an AI system independently carries out an end-to-end intrusion.

#1 Best Overall
Sale
TP-Link ER605, Wired Gigabit VPN Router
  • 【Five Gigabit Ports】1 Gigabit WAN Port plus 2 Gigabit WAN/LAN Ports plus 2 Gigabit LAN Port. Up to 3 WAN ports optimize bandwidth usage through one device.
  • 【One USB WAN Port】Mobile broadband via 4G/3G modem is supported for WAN backup by connecting to the USB port. For complete list of compatible 4G/3G modems, please visit TP-Link website.
  • 【Abundant Security Features】Advanced firewall policies, DoS defense, IP/MAC/URL filtering, speed test and more security functions protect your network and data.
  • 【Highly Secure VPN】Supports up to 20× LAN-to-LAN IPsec, 16× OpenVPN, 16× L2TP, and 16× PPTP VPN connections.
  • Security - SPI Firewall, VPN Pass through, FTP/H.323/PPTP/SIP/IPsec ALG, DoS Defence, Ping of Death and Local Management. Standards and Protocols IEEE 802.3, 802.3u, 802.3ab, IEEE 802.3x, IEEE 802.1q

Microsoft Threat Intelligence reported that 63% of intrusions it observed involved data theft, and that exposed cloud workloads were attacked after an average of 5.3 hours. It also reported detecting more than 46 million business contact impersonation (BCI) attacks over the past 12 months. These are Microsoft telemetry figures, not independently audited estimates for the entire internet; the report’s data windows include July 1, 2025 to June 30, 2026, and “past 12 months” refers to Microsoft’s reporting period. See the Microsoft Digital Defense Report 2026 for the report context.

Attacks that use AI versus attacks on AI

It helps to separate two problems. An attacker may use AI to improve familiar social engineering or technical work. Separately, an AI model, its data, plugins, tools or infrastructure may be targeted. Microsoft summarizes this dual challenge in its 2026 report: “AI is expanding what attackers can do and what defenders must protect at the same time.”

Risks to AI systems

NIST’s AI 100-2 E2025 provides voluntary guidance and terminology for identifying, addressing and managing adversarial machine-learning risks. Its taxonomy includes evasion, poisoning, privacy and misuse attacks across predictive and generative systems. Microsoft also highlights risks such as prompt injection, sensitive-information disclosure, insecure plugins, model theft and training-data poisoning.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #2
FortiGate-40F Firewall Appliance - 5 Gigabit Ethernet RJ45 Ports, Ideal for Small Businesses (Appliance Only, No Subscription) (FG-40F)
  • Compact and Efficient Design: The FortiGate 40F is designed for small to mid-sized businesses and enterprise branch offices, featuring a compact, fanless desktop form factor that ensures quiet operation and minimizes space usage.
  • Robust Connectivity Options: Equipped with 5 GE RJ45 ports, including 1 WAN port and 4 internal ports, this model provides essential connectivity and flexibility for various network configurations in a small-scale environment.
  • High-Performance Security: Offers up to 1 Gbps IPS throughput and 600 Mbps threat protection throughput, using Fortinet’s purpose-built security processor technology to deliver industry-leading performance and protection for SSL encrypted traffic.
  • Advanced Threat Protection: Integrated with Fortinet’s AI-powered FortiGuard Labs, the FortiGate 40F offers comprehensive cybersecurity, identifying and mitigating both known and unknown threats to maintain robust security across your network.
  • Simplified Management and Deployment: Features a user-friendly management console that provides comprehensive network automation and visibility, coupled with Zero Touch Integration with Fortinet’s Security Fabric for easy deployment.

For example, untrusted text supplied to an AI assistant may try to steer it toward an unsafe action; an overly permissive plugin or agent may turn that mistake into access to data or systems. These are risks to assess in the context of a particular design, not evidence that every AI product has the same exposure. NIST’s AI research program on security and resilience likewise recognizes that AI can support vulnerability defense while also enhancing attacker capabilities in information technology and operational technology.

Can AI-generated phishing or deepfakes be detected?

There is no established basis here for claiming that a particular AI detector can reliably identify AI-generated phishing or deepfakes. Detection tools may be one signal, but a detector result should not replace verification of identity, intent and authorization. Nor does fluent writing establish that a message was AI-generated.

Organizations should use layered email, browser and endpoint protections and give staff a clear way to report suspicious requests. For requests involving money, credentials, sensitive information or urgent executive instructions, verify through a separately trusted channel rather than replying to the message or relying on the apparent voice or video alone.

Rank #3
GL.iNet GL-MT5000 Brume 3 Wired VPN Security Gateway NO Wi-Fi
  • 【Up to 1100 Mbps VPN Speed 】 Hardware-accelerated WireGuard and OpenVPN-DCO deliver up to 1100 Mbps VPN throughput, over 3× faster than Brume 2 for smooth remote access and file transfers.
  • 【Three 2.5G Ports & Multi-WAN】Tri-port 2.5GbE design with flexible WAN LAN configuration supports multi-gigabit wired setups, dual-ISP Multi-WAN and failover to keep home and SOHO networks online.
  • 【Stealth VPN Obfuscation】VPN obfuscation disguises VPN traffic as regular HTTPS, helping you evade blocking, bypass restrictive networks and maintain stable, private connections.
  • 【DPI protection】Deep Packet Inspection with visual dashboards blocks adult/gambling/malicious sites, while SQM and QoS prioritize gaming, calls, and video when bandwidth is tight
  • 【OpenWrt & USB 3.0 Expansion】OpenWrt with 1GB DDR4 and 8GB eMMC lets you install plugins and build VPN, ad-blocking or NAS, while USB 3.0 Type‑C connects high-speed storage or 4G/5G dongles
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Which defenses still work?

AI changes the scale and presentation of threats, but it does not remove the value of controls that limit access, expose suspicious activity and reduce the time vulnerable systems remain open to attack. Microsoft’s 2026 report emphasizes that human action and trusted access remain common initial-access themes, and recommends layered identity, endpoint and browser protections. These controls reduce risk; they do not guarantee that every attack will be stopped.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Strengthen identity and limit privilege

  • Require phishing-resistant authentication where available, especially for administrators and other high-impact accounts.
  • Reduce standing privileged access; grant elevated permissions only when needed and review access routinely.
  • Use established procedures to verify account recovery and credential-reset requests.

Protect devices, browsers and mail workflows

Use layered security controls and monitoring across endpoints, browsers and email rather than expecting people to spot every convincing lure. Ensure the organization can investigate suspicious sign-ins and activity across systems; visibility helps defenders connect events that would otherwise appear unrelated.

Verify consequential requests independently

Require confirmation over a separately trusted channel for transfers, credential resets, sensitive disclosures and urgent executive requests. Microsoft’s 2025 report recommends authenticated communication channels and training users to recognize manipulation tactics. Make the verification route practical and known in advance—for example, a directory-listed number or an established internal approval process.

Rank #4
Tenda AX3000 WiFi 6 Router, Dual-Band Gigabit, RX12 Pro V3.0
  • AX3000 WiFi 6 Speed: Get up to 2402 Mbps on 5 GHz and 574 Mbps on 2.4 GHz for smooth 4K streaming, gaming, video calls, and fast downloads across your home.
  • Built for Busy Homes: OFDMA and MU-MIMO help multiple phones, laptops, TVs, and gaming devices share the network efficiently, reducing congestion when everyone is online.
  • 7 dBi High-Gain Coverage & EasyMesh: High-gain antennas and Beamforming extend stronger WiFi throughout your home. EasyMesh support lets you expand coverage with compatible routers and roam seamlessly from room to room.
  • VPN & Secure IoT Networking: Built-in OpenVPN, WireGuard, PPTP, and L2TP support flexible VPN connections, while a dedicated IoT network helps isolate smart-home devices from your primary network.
  • Easy Setup with NFC & 4 Gigabit Ports: Set up and manage your router through the Tenda app or web interface. NFC tap-to-connect makes joining WiFi easier, while 4× Gigabit ports with automatic WAN/LAN detection simplify wired connections.

Patch exposed systems and monitor for incidents

Prioritize timely remediation of internet-facing vulnerabilities, and maintain visibility across the systems that matter to the organization. A system exposed to the internet may be reachable by attackers regardless of whether AI was involved, so remediation should be driven by exposure and risk rather than assumptions about an attacker’s tools.

Govern defensive AI and automated agents

Defensive AI also needs security controls. Protect the data and model assets it relies on, screen untrusted inputs, restrict plugin and tool permissions, and monitor agent identities and actions. Keep human review for consequential decisions or automated actions: a model-generated alert is not proof, and a proposed response should be checked against telemetry and policy. The specific safeguards depend on how the system is built and what access it has.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Train for verification, not just suspicious wording

Training should teach people to pause, verify identity through a trusted route, and escalate unusual requests—even when the language is fluent, translated or familiar in tone. Provide a straightforward reporting path so that staff can raise concerns without having to decide whether a message was generated by AI.

Microsoft’s 2025 report puts the emphasis on cybersecurity culture, manipulation awareness and authenticated communications. NIST’s taxonomy is guidance for managing adversarial machine-learning risks, not a measurement of how effective any particular control is in the field. The cited sources do not establish a universal ranking of defenses by cost or effectiveness.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More from the Wire

  1. World desk4 min
    How to Spot an AI Voice Scam Before Sending MoneyDon’t rely on how a caller sounds. Pause, call back through a known number, and verify the emergency with another trusted person before sending money.
  2. Mountain View desk4 min
    Google’s SynthID Detector: How to Check AI-Generated Images, Video and AudioGoogle’s SynthID Detector looks for an embedded watermark in supported images, video and audio. Here is what its results do—and do not—show.
  3. Redmond desk20 min
    How to create a link to File or Folder in Windows 11Windows 11 gives you several ways to point to a file or folder without moving or duplicating it. You can create a desktop shortcut,…
Recommended PC Tool
Recommended PC Tool
PC Slower Than It Used to Be?Free scan - under a minute
Outdated Drivers Are Slowing You DownFree scan - exact matches

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.