Artificial intelligence is becoming part of the cyberattack toolkit, but its most immediate impact may be less dramatic than the idea of fully autonomous hackers suggests. Instead, AI is helping attackers improve existing techniques — from reconnaissance and phishing to analysing stolen information and exploiting software vulnerabilities — while cybersecurity agencies warn that these capabilities could become more powerful as AI systems advance. A recent case involving the North Korean-linked cyber group Kimsuky illustrates the shift.

From Phishing Lures to AI Infrastructure

In August, South Korean cybersecurity company Genians reported finding evidence that Kimsuky had assembled infrastructure for running and managing AI models locally.

According to Genians, the infrastructure included tools such as Ollama, GPT4All and Msty, as well as retrieval-augmented generation (RAG) technology, AI-agent development frameworks, speech-to-text software and Cursor, an AI-assisted coding tool. The significance is not that Kimsuky had developed its own large language model. Rather, the reported infrastructure suggests an attempt to bring existing AI capabilities into a cyber-operation workflow.

Genians said local AI systems could allow operators to analyse documents without sending sensitive information to external AI services. It also assessed that the tools could support malware development, analysis of stolen material, attack automation and more convincing phishing campaigns.

The company said it also identified finance- and cryptocurrency-themed documents that appeared to have been generated with AI and designed to resemble legitimate investment reports and workplace documents. Reuters reported that Genians’ evidence could not be independently confirmed. The claims should therefore be understood as a cybersecurity firm’s assessment rather than independently established evidence of Kimsuky’s capabilities.

Still, the reported activity fits a wider trend identified by cybersecurity authorities.

AI Strengthening Existing Cyber Capabilities

The UK’s National Cyber Security Centre (NCSC) has repeatedly warned that AI is already affecting the cyber threat landscape.

Its 2025 assessment of the impact of AI on cyber threats through 2027 says AI is likely to make elements of cyber intrusion more effective and efficient. The agency expects AI-enabled tools to improve threat actors’ ability to exploit known vulnerabilities and warns that the period between vulnerability disclosure and exploitation could become even shorter.

The important point is that AI does not need to independently carry out an entire cyberattack to be useful to an attacker. A cyberattacker can use AI to perform individual tasks more quickly: understand technical information, research a target, process large quantities of text, generate or modify code, or produce convincing communications.

This can reduce the amount of human time needed for different stages of an operation. The NCSC’s assessment is therefore more measured than the idea of an imminent era of completely autonomous hacking. It describes AI primarily as a technology that can enhance existing cyber capabilities, while acknowledging that the technology is developing rapidly and that technical surprises are possible.

Phishing: One of the Clearest Risks

Social engineering is particularly suited to generative AI. Phishing traditionally depends on persuading a victim to trust a message, link or document. Poor grammar, awkward phrasing or obvious inconsistencies can expose fraudulent communications.

Generative AI can reduce some of those weaknesses by producing coherent text and adapting content to a particular context. The risk is not simply better-written emails. AI can help attackers work with information about potential targets and produce different versions of messages at much greater scale.

This is why cybersecurity agencies have focused on AI-enabled social engineering alongside other forms of cyberattacks. But there is an important distinction between AI-assisted phishing and autonomous phishing operations. The evidence available today supports the former much more strongly than the latter.

Stolen Data Could Become More Useful

The Kimsuky case also highlights another potential application: analysing information after it has been stolen. Large language models are designed to work with large volumes of text. When combined with retrieval systems, they can make it easier to search and retrieve relevant information from a collection of documents.

RAG, or retrieval-augmented generation, is not itself a cyberattack technology. It is a general AI architecture that allows a model to retrieve information from an external knowledge base and use it when generating an answer. Its presence in Kimsuky’s reported infrastructure is therefore significant because of how the technology was allegedly being incorporated into the broader operation, rather than because RAG itself is malicious.

The same principle applies to the other tools identified by Genians. Ollama, GPT4All, Msty and Cursor are legitimate AI or software-development tools. Their appearance in a suspected cyber-operation does not make the tools themselves malicious. The concern is how legitimate AI capabilities can be repurposed.

Cyberattacks: Why Local AI Matters

The reported use of locally operated AI models introduces another dimension. When an AI system runs locally, information can be processed on infrastructure controlled by the operator rather than necessarily being sent to an external AI service.

For legitimate users, local processing can provide privacy, control and offline functionality. For a cyberattack, the same characteristic could make it possible to process sensitive or stolen material without relying on an external AI provider.

That does not make local AI inherently unsafe. It illustrates a broader cybersecurity principle: capabilities designed for privacy and control can have both legitimate and malicious uses.

The UK AI security: Distinct Cyber Issue

Governments are now responding not only to the use of AI by attackers but also to vulnerabilities within AI systems themselves. The UK published its Code of Practice for the Cyber Security of AI in January 2025. The voluntary framework applies to AI systems, including generative AI, and sets out security principles across the AI lifecycle. The UK’s approach has subsequently moved towards international standardisation.

The European Telecommunications Standards Institute (ETSI) developed EN 304 223, a standard for the cybersecurity of AI. The UK government says the standard draws from the UK’s AI Cyber Security Code of Practice. In July 2026, the UK Department for Science, Innovation and Technology also published a mapping of global AI security standards, regulations and guidance against ETSI EN 304 223.

This reflects an important change in policy thinking: AI security is increasingly being treated as part of cybersecurity rather than as a separate question of AI ethics or safety. The UK is also strengthening wider cyber resilience

AI-specific policy sits alongside broader UK cybersecurity measures. The Cyber Security and Resilience (Network and Information Systems) Bill is currently progressing through Parliament. Its stated purpose is to strengthen the security and resilience of network and information systems used in connection with essential activities. As of August 13, 2026, the Bill is in the House of Lords, with committee stage scheduled to begin on September 1.

The legislation is broader than AI. But that is important because AI-enabled attacks ultimately target the same networks, organisations and digital infrastructure that conventional cyber threats target.

The NCSC has also stressed that cyber resilience cannot be treated solely as an IT concern. In June 2026, it warned that the rapid pace of frontier AI development means assumptions about cyberattack can become outdated within months rather than years.

The Bigger Risk is Convergence

The Kimsuky case points towards a more important question than whether hackers will use AI. They already are. The question is how deeply AI will become integrated into the different stages of a cyber operation. Today, the strongest evidence points towards augmentation: AI helping humans perform existing tasks more quickly or at greater scale. Tomorrow’s risk could lie in the increasing connection between those individual capabilities — reconnaissance, information retrieval, social engineering, coding and vulnerability exploitation.

That does not mean AI will suddenly produce completely autonomous cybercriminals. Current evidence does not justify that conclusion. But it does suggest that cybersecurity is entering a period in which the traditional boundary between a human attacker and a software tool is becoming less clear.

For defenders, that makes speed important. If AI allows cyberattackers to analyse information, identify vulnerabilities or tailor social-engineering attempts faster, defensive systems will need to detect and respond at comparable speed. The UK’s emerging policy framework reflects this shift: secure the AI systems themselves, strengthen the resilience of the infrastructure around them, and prepare for AI to become part of both offensive and defensive cybersecurity.

The Kimsuky case, if Genians’ findings are borne out by further evidence, could be an early example of that transition, not because AI has replaced the hacker, but because the hacker is beginning to use AI as part of the machinery of the cyberattack.

For thousands of people living with limb loss in India, getting a prosthetic limb can remain out of reach because of cost and limited access. Vidushee, Shravya and Shloka, students of Mallya Aditi International School in Bengaluru, have developed a material that they believe could help make some prosthetic components more affordable. Their project, Reviv3D, uses a composite made from recycled plastic, bagasse and basalt. The students say the material is stronger than some fibreglass alternatives, considerably cheaper and recyclable.

The project has now won the global finals of Monash University’s Change It Challenge in Melbourne, giving the students an international platform to present their approach to an issue that sits at the intersection of healthcare, materials science and sustainability.

A Shortage Shaped By Cost

Access to a prosthetic limb is not determined only by whether the technology exists. Its cost, availability and suitability for an individual’s needs can determine whether a person is able to obtain and use one. The competition material cites around 23,000 amputations annually in India and notes that many people do not receive prosthetic limbs because of their cost.

India has developed several approaches to making prosthetic technology more accessible. The Jaipur Foot, for example, became widely recognised for providing relatively low-cost prostheses designed around local requirements.

Reviv3D approaches the problem from another direction: the material itself. The students asked whether materials that are readily available as waste could be combined to produce a strong, functional and lower-cost material for prosthetic applications.

Reviv3D: Three Waste Materials, One Composite

Reviv3D combines three main inputs. Recycled plastic forms the polymer component of the material. Bagasse, the fibrous residue left after sugarcane or sorghum is crushed to extract its juice, provides plant-based reinforcement. Basalt, sourced from stone-crushing waste, adds another reinforcing component. Together, these materials form a composite. The principle behind a composite is to combine materials with different properties so that the final product can perform better than its individual components might on their own.

Bagasse has been studied as a natural fibre for reinforcing composite materials, while basalt is valued for properties such as strength and stiffness. The students’ work brings these materials together with recycled plastic for a potential use in prosthetic technology.

Their stated aim is to produce a material that can offer the required strength at a substantially lower cost than some conventional alternatives.

An Environmental Solution Alongside a Healthcare Problem

The project also has a second dimension. Each of the materials used in Reviv3D comes from a waste stream or a material that can otherwise have limited value after its primary use. Plastic waste is one of India’s persistent environmental challenges. Agricultural residues such as bagasse are generated in large quantities, while stone-crushing produces substantial quantities of mineral waste.

Using such materials in a new composite creates the possibility of turning waste into a resource. This idea is central to the circular economy: rather than following a linear model in which materials are extracted, manufactured into products and eventually discarded, materials are kept in use for as long as possible.

Reviv3D does not solve the plastic or industrial-waste problem by itself. But it demonstrates how a waste material can be considered as an engineering input rather than simply something that needs to be disposed of. That becomes particularly interesting when the resulting product is intended for a socially important application.

Why the Material Matters

For a prosthetic application like Reviv3D, affordability cannot come at the expense of performance. A prosthetic component may be exposed to repeated loads and movement over long periods. The material therefore needs to withstand mechanical stress while remaining light and durable.

That means the students’ claims about strength and cost will need to be tested systematically. Further research would need to examine properties such as tensile and compressive strength, fatigue resistance, impact resistance, weight, flexibility and durability. Researchers would also need to establish whether the material can be manufactured consistently at scale.

The conditions in which a prosthetic is used can also affect material performance. Exposure to moisture, temperature changes and repeated mechanical stress can alter materials over time. If Reviv3D progresses towards medical use, additional safety testing, clinical evaluation and regulatory approval would be required.

The information released by Monash does not indicate that the material has undergone clinical trials or received regulatory approval. It is therefore more accurate to describe Reviv3D as a student-developed material innovation with potential for further research, rather than as an already validated prosthetic technology.

From Bengaluru to Melbourne

The project Reviv3D was developed by Vidushee, Shravya and Shloka at Mallya Aditi International School. Their work progressed to the global finals of Monash University’s Change It Challenge, which brings high school students together to develop solutions to real-world problems.

Vidushee and Shravya represented the team at the Melbourne final, while Shloka was unable to attend. The judging panel, led by Monash University Executive Director of Student Recruitment Amy Gledden, praised the team’s problem-solving abilities, scientific approach and human-centred design.

As part of the programme, the students attended academic sessions, visited Monash’s Clayton and Caulfield campuses and interacted with researchers.

For Vidushee and Shravya, the experience also offered an opportunity to develop the project further. They said the competition helped them strengthen their research, communication and teamwork skills and encouraged them to explore how their work could contribute to more affordable healthcare.

What Needs to Happen Next?

Winning the competition is an important milestone, but determining whether Reviv3D can become a practical prosthetic material will require further research. The first step would be rigorous laboratory testing to establish how the composite behaves under different mechanical conditions. Researchers would then need to examine manufacturing, cost, durability and the specific prosthetic components for which the material might be suitable.

There is also an important question about who would use the technology and how it would be produced for them. Prosthetic devices often require individual fitting and adjustment, so affordability depends not only on the raw material but also on manufacturing, design, fitting and follow-up services.

These are challenges that the students’ prototype cannot answer on its own. But Reviv3D begins with an important idea: a healthcare problem does not always require a solution from a single field. Here, materials science meets assistive technology, while waste materials become part of the search for a more affordable solution. The project does not yet establish that recycled plastic, bagasse and basalt can replace existing prosthetic materials. That will depend on further testing.

What the three students have demonstrated is that a question about access to healthcare can lead to another question about how we use the materials around us—and whether some of what we call waste could instead become part of the solution.

The race to make electronic devices smaller and more powerful has reached a point where conventional materials are approaching their physical limits. Scientists have long believed that molecules—the tiny clusters of atoms that make up matter—could offer a way forward. They are incredibly small, their properties can be customised, and they hold promise for building faster computers, advanced sensors and quantum technologies.

The challenge has been finding a way to integrate these fragile molecular materials into electronic devices without damaging them.

Researchers at the Massachusetts Institute of Technology (MIT) now say they have found a solution. Their newly developed fabrication platform allows delicate molecular materials to be incorporated into electronic devices using existing semiconductor manufacturing techniques while preserving their structure and performance. The findings have been published in Nature Nanotechnology.

Molecular Electronics: Why Molecules Matter

Unlike conventional electronic materials, molecules can be chemically designed to perform specific functions. This flexibility makes them attractive for applications ranging from memory devices and optical technologies to emerging forms of computing.

However, traditional chip manufacturing relies on high temperatures, harsh chemicals and complex processing steps that can easily destroy molecular structures. As a result, molecular electronics has largely remained confined to laboratory experiments rather than practical devices. The MIT team’s approach aims to bridge that gap.

Building First, Adding Molecules Later

Instead of exposing molecules to conventional manufacturing processes, the researchers reversed the sequence. They first fabricated the electronic device using standard semiconductor techniques. Only after the device structure was complete did they introduce the molecular layer.

To create the final electrical connection, the researchers relied on forces that naturally exist at the nanoscale. As the liquid containing the molecules evaporated, capillary forces gently pulled two metal electrodes together, trapping the molecular layer between them. Another natural interaction, known as van der Waals force, then held the structure firmly in place.

The process avoided mechanical damage while creating stable electrical contacts with molecules less than one nanometre thick.

A Breakthrough in Reliability

The researchers fabricated more than 1,000 molecular electronic devices using the technique. Around 96 percent functioned successfully—a remarkably high yield for molecular-scale electronics.

Equally significant was their durability. The devices continued to operate reliably after tens of thousands of electrical cycles without signs of degradation, addressing one of the biggest obstacles that has slowed the development of molecular electronics.

The team also demonstrated interconnected arrays of molecular memory devices, suggesting the method can support larger circuits rather than isolated experimental components.

Lab to Real World Technologies

The significance of the work extends beyond improving individual devices. By making molecular materials compatible with existing chip manufacturing, the technique could accelerate research into entirely new classes of electronic systems.

Potential applications include ultra-low-power computing, high-performance sensors, photonic technologies and quantum devices that operate at scales far smaller than today’s electronics.

Rather than replacing conventional semiconductor manufacturing, the platform complements it by enabling new materials to be integrated into existing fabrication processes.

As researchers continue to push the limits of miniaturisation, this approach could help move molecular electronics from experimental research into technologies that shape future generations of computing.