Notices by Tom Uren (tomatospy@infosec.exchange)

@mdh @GossiTheDog @euroinfosec

Yes. That’s right, Google https://cloud.google.com/blog/topics/threat-intelligence/adversarial-misuse-generative-ai and OpenAI https://cdn.openai.com/threat-intelligence-reports/influence-and-cyber-operations-an-update_October-2024.pdf have said that it is being used.

These reports are both based on examining how AI models are being used.

My guess is the disconnect arises because from an incident response perspective use of AI tools is not obvious.