AI-driven threat actors are moving from simple prompt-based intrusions to autonomous, decision-making attack workflows that can operate with minimal human oversight.

Geopolitical links are evident as adversaries tied to China, Russia, and Iran leverage open AI models inside victims’ cloud environments to target U.S. academic, medical, and military research while trying to minimize trails.

There are coordinated distillation campaigns aimed at extracting proprietary Google AI systems, underscoring growing legal and policy tensions around industrial-scale model distillation.

Iran-linked actors are using Gemini to generate photorealistic deepfakes for social engineering, with the system autonomously optimizing parameters to enhance realism.

Industry and policymakers—from OpenAI and Anthropic to regulators—are contending with rival AI practices, signaling regulatory and enforcement implications for the field.

UNC6508 researchers are examining how to deploy AI tools, including local use of open models and probing AI model vulnerabilities, highlighting active defense and assessment work.

Intro: As AI advances, cybersecurity threats expand with autonomous, agentic AI systems enabling more sophisticated attacks beyond simple prompts.