Connect with us

Technology

When AI Becomes a Cyber Weapon: How Artificial Intelligence Is Changing Cyberattacks

AI is becoming part of the cyberattack toolkit, with threat actors using generative AI to improve phishing, analyse stolen documents, develop code and automate parts of cyber operations. A recent Kimsuky-linked campaign highlights this shift, while the UK is developing AI-specific cybersecurity standards to address the growing threat.

Vaishnavi V S

Published

on

AI-powered cyberattack and cybersecurity concept showing a digital shield protecting against cyber threats
AI is changing cyberattacks by enabling faster phishing, data analysis and other offensive cyber capabilities. Representational image. Image credit: AhmedAlMaslamani/Pixabay

Artificial intelligence is becoming part of the cyberattack toolkit, but its most immediate impact may be less dramatic than the idea of fully autonomous hackers suggests. Instead, AI is helping attackers improve existing techniques — from reconnaissance and phishing to analysing stolen information and exploiting software vulnerabilities — while cybersecurity agencies warn that these capabilities could become more powerful as AI systems advance. A recent case involving the North Korean-linked cyber group Kimsuky illustrates the shift.

From Phishing Lures to AI Infrastructure

In August, South Korean cybersecurity company Genians reported finding evidence that Kimsuky had assembled infrastructure for running and managing AI models locally.

According to Genians, the infrastructure included tools such as Ollama, GPT4All and Msty, as well as retrieval-augmented generation (RAG) technology, AI-agent development frameworks, speech-to-text software and Cursor, an AI-assisted coding tool. The significance is not that Kimsuky had developed its own large language model. Rather, the reported infrastructure suggests an attempt to bring existing AI capabilities into a cyber-operation workflow.

Genians said local AI systems could allow operators to analyse documents without sending sensitive information to external AI services. It also assessed that the tools could support malware development, analysis of stolen material, attack automation and more convincing phishing campaigns.

The company said it also identified finance- and cryptocurrency-themed documents that appeared to have been generated with AI and designed to resemble legitimate investment reports and workplace documents. Reuters reported that Genians’ evidence could not be independently confirmed. The claims should therefore be understood as a cybersecurity firm’s assessment rather than independently established evidence of Kimsuky’s capabilities.

Still, the reported activity fits a wider trend identified by cybersecurity authorities.

AI Strengthening Existing Cyber Capabilities

The UK’s National Cyber Security Centre (NCSC) has repeatedly warned that AI is already affecting the cyber threat landscape.

Its 2025 assessment of the impact of AI on cyber threats through 2027 says AI is likely to make elements of cyber intrusion more effective and efficient. The agency expects AI-enabled tools to improve threat actors’ ability to exploit known vulnerabilities and warns that the period between vulnerability disclosure and exploitation could become even shorter.

The important point is that AI does not need to independently carry out an entire cyberattack to be useful to an attacker. A cyberattacker can use AI to perform individual tasks more quickly: understand technical information, research a target, process large quantities of text, generate or modify code, or produce convincing communications.

This can reduce the amount of human time needed for different stages of an operation. The NCSC’s assessment is therefore more measured than the idea of an imminent era of completely autonomous hacking. It describes AI primarily as a technology that can enhance existing cyber capabilities, while acknowledging that the technology is developing rapidly and that technical surprises are possible.

Phishing: One of the Clearest Risks

Social engineering is particularly suited to generative AI. Phishing traditionally depends on persuading a victim to trust a message, link or document. Poor grammar, awkward phrasing or obvious inconsistencies can expose fraudulent communications.

Generative AI can reduce some of those weaknesses by producing coherent text and adapting content to a particular context. The risk is not simply better-written emails. AI can help attackers work with information about potential targets and produce different versions of messages at much greater scale.

This is why cybersecurity agencies have focused on AI-enabled social engineering alongside other forms of cyberattacks. But there is an important distinction between AI-assisted phishing and autonomous phishing operations. The evidence available today supports the former much more strongly than the latter.

Stolen Data Could Become More Useful

The Kimsuky case also highlights another potential application: analysing information after it has been stolen. Large language models are designed to work with large volumes of text. When combined with retrieval systems, they can make it easier to search and retrieve relevant information from a collection of documents.

RAG, or retrieval-augmented generation, is not itself a cyberattack technology. It is a general AI architecture that allows a model to retrieve information from an external knowledge base and use it when generating an answer. Its presence in Kimsuky’s reported infrastructure is therefore significant because of how the technology was allegedly being incorporated into the broader operation, rather than because RAG itself is malicious.

The same principle applies to the other tools identified by Genians. Ollama, GPT4All, Msty and Cursor are legitimate AI or software-development tools. Their appearance in a suspected cyber-operation does not make the tools themselves malicious. The concern is how legitimate AI capabilities can be repurposed.

Masked figure facing computer screens, illustrating the growing use of AI tools in cyberattacks such as phishing, stolen-data analysis and cyberattack automation.
The reported Kimsuky activity highlights how AI tools are being incorporated into cyberattack operations, from analysing stolen material to developing more convincing phishing campaigns. Representational image. Image credit: Tima Miroshnichenko/Pexels

Cyberattacks: Why Local AI Matters

The reported use of locally operated AI models introduces another dimension. When an AI system runs locally, information can be processed on infrastructure controlled by the operator rather than necessarily being sent to an external AI service.

For legitimate users, local processing can provide privacy, control and offline functionality. For a cyberattack, the same characteristic could make it possible to process sensitive or stolen material without relying on an external AI provider.

That does not make local AI inherently unsafe. It illustrates a broader cybersecurity principle: capabilities designed for privacy and control can have both legitimate and malicious uses.

The UK AI security: Distinct Cyber Issue

Governments are now responding not only to the use of AI by attackers but also to vulnerabilities within AI systems themselves. The UK published its Code of Practice for the Cyber Security of AI in January 2025. The voluntary framework applies to AI systems, including generative AI, and sets out security principles across the AI lifecycle. The UK’s approach has subsequently moved towards international standardisation.

The European Telecommunications Standards Institute (ETSI) developed EN 304 223, a standard for the cybersecurity of AI. The UK government says the standard draws from the UK’s AI Cyber Security Code of Practice. In July 2026, the UK Department for Science, Innovation and Technology also published a mapping of global AI security standards, regulations and guidance against ETSI EN 304 223.

This reflects an important change in policy thinking: AI security is increasingly being treated as part of cybersecurity rather than as a separate question of AI ethics or safety. The UK is also strengthening wider cyber resilience

AI-specific policy sits alongside broader UK cybersecurity measures. The Cyber Security and Resilience (Network and Information Systems) Bill is currently progressing through Parliament. Its stated purpose is to strengthen the security and resilience of network and information systems used in connection with essential activities. As of August 13, 2026, the Bill is in the House of Lords, with committee stage scheduled to begin on September 1.

The legislation is broader than AI. But that is important because AI-enabled attacks ultimately target the same networks, organisations and digital infrastructure that conventional cyber threats target.

The NCSC has also stressed that cyber resilience cannot be treated solely as an IT concern. In June 2026, it warned that the rapid pace of frontier AI development means assumptions about cyberattack can become outdated within months rather than years.

The Bigger Risk is Convergence

The Kimsuky case points towards a more important question than whether hackers will use AI. They already are. The question is how deeply AI will become integrated into the different stages of a cyber operation. Today, the strongest evidence points towards augmentation: AI helping humans perform existing tasks more quickly or at greater scale. Tomorrow’s risk could lie in the increasing connection between those individual capabilities — reconnaissance, information retrieval, social engineering, coding and vulnerability exploitation.

That does not mean AI will suddenly produce completely autonomous cybercriminals. Current evidence does not justify that conclusion. But it does suggest that cybersecurity is entering a period in which the traditional boundary between a human attacker and a software tool is becoming less clear.

For defenders, that makes speed important. If AI allows cyberattackers to analyse information, identify vulnerabilities or tailor social-engineering attempts faster, defensive systems will need to detect and respond at comparable speed. The UK’s emerging policy framework reflects this shift: secure the AI systems themselves, strengthen the resilience of the infrastructure around them, and prepare for AI to become part of both offensive and defensive cybersecurity.

The Kimsuky case, if Genians’ findings are borne out by further evidence, could be an early example of that transition, not because AI has replaced the hacker, but because the hacker is beginning to use AI as part of the machinery of the cyberattack.

Vaishnavi VS is an Editorial Associate at EdPublica. She holds a Master's degree in Mass Communication from Pondicherry University, India. She writes on education, science, environment, innovation, and public policy.

Technology

OpenAI Promises Greater Transparency as Data Centre Backlash Grows in the US

OpenAI’s new National Community Compact promises greater transparency in data centre development, including public disclosure of energy and water use and safeguards against higher electricity costs.

Published

on

OpenAI website displayed on a smartphone, showing the company's mission to ensure artificial general intelligence benefits humanity.
OpenAI has announced new transparency commitments for its AI infrastructure projects amid growing scrutiny of data centre expansion. Representational image. Image credit: Solen Feyissa/ Pexels

The rapid expansion of artificial intelligence is increasing demand for the data centres that power it. Across the United States, however, plans to build these energy-intensive facilities are encountering resistance from communities concerned about electricity bills, water consumption, noise and environmental impacts. Against this backdrop, OpenAI announced a National Community Compact outlining commitments to improve transparency and strengthen community participation in the development of its computing infrastructure.

The company has also released a Compute Campus Policy Blueprint, proposing measures for governments and regulators to consider when overseeing data centre development. The announcement comes amid growing public and political scrutiny of the technology industry’s infrastructure expansion.

Ending Secrecy Around Data Centre Negotiations

One of the most significant commitments concerns non-disclosure agreements (NDAs). OpenAI says it will stop requiring public officials to sign NDAs during negotiations over future facilities, except where legitimate security concerns, trade secrets or commercially sensitive information require protection.

Such agreements have attracted criticism because they can restrict the information elected representatives share with residents about proposed developments. Greater disclosure could allow communities to understand the scale and potential consequences of projects before construction begins.

OpenAI has also committed to engaging residents early in the planning process, appointing a local point of contact for each facility and publishing annual reports detailing its progress against the compact’s commitments. The agreement applies to future computing facilities owned and operated by OpenAI, rather than every data centre used by the company.

Who Pays for the Electricity?

Electricity demand is among the most contentious aspects of data centre expansion. These facilities require continuous power to operate servers and cooling systems, potentially placing additional pressure on electricity grids and increasing costs for other consumers.

OpenAI and data centres
Electrical control panels inside an industrial power facility, illustrating the electrical infrastructure required to support energy-intensive AI data centres and their growing demand on power grids. Representational image. Image credit: Brett Sayles/ Pexels

OpenAI has pledged to pay the full cost of the electricity its facilities consume, along with the infrastructure upgrades required to supply them. It also proposes financial safeguards to prevent households and businesses from bearing costs if a planned project is delayed, scaled down or cancelled.

The company has proposed reducing electricity consumption during periods of peak demand and making power available to the grid when necessary. Its planned facility in Effingham County, Georgia, illustrates this approach. Under an agreement with Georgia Power, the utility can reduce electricity supplied to the facility by up to 1,000 megawatts during periods of peak demand.

Water Consumption and Environmental Disclosure

Cooling systems are another environmental concern. Data centres generate considerable heat, and some cooling technologies require substantial quantities of water to maintain operating temperatures. OpenAI says it will prioritise closed-loop and low-water cooling systems and develop water-management plans for individual facilities. It has also committed to publishing site-level information on electricity and water consumption.

The company plans to disclose construction details and commission independent noise studies before facilities begin operations. Annual reporting on relevant environmental impacts is also part of the compact. These disclosures could help communities assess the pressures associated with hosting large computing facilities. Their usefulness, however, will depend on the completeness of the information and the scope for independent scrutiny.

Growing resistance to data centre expansion

The announcement comes as opposition to data centre development gains momentum in the United States. Residents have questioned whether the economic benefits of hosting these facilities justify their demands on local electricity, water and infrastructure. According to Data Center Watch, at least 45 data centre projects worth 68 billion dollars faced disruption from local opposition during the second quarter of 2026.

OpenAI has also promised to publish local hiring goals and provide information about employment opportunities. Its commitments include helping local suppliers compete for contracts and encouraging partnerships with community colleges and trade organisations to prepare workers for construction and technical jobs.

However, voluntary corporate commitments do not carry the same force as legally enforceable regulations. OpenAI’s policy blueprint therefore calls on governments to establish stronger oversight of electricity costs, environmental disclosures and community benefits.

As AI computing demand continues to grow, the pressure on electricity networks, water resources and local infrastructure is likely to intensify. Whether OpenAI’s compact delivers meaningful accountability will depend on how consistently its commitments are implemented and independently scrutinised.

Continue Reading

Technology

How an Indian-made Silicon Chip Could Help Terahertz Signals Overcome Obstacles in Future 6G Networks

An Indian research team at JNCASR has demonstrated a silicon photonic chip that allows terahertz signals to cross engineered barriers with minimal loss, a development that could advance high-speed circuits for future 6G networks.

Published

on

6G wireless communication symbol representing next-generation mobile network technology.
6G technology is expected to use higher-frequency terahertz waves to support faster data transmission and greater network capacity. Representational image. Image credit: geralt/ Pexels

A sharp bend, a junction or a sudden change in a circuit’s structure can weaken an electromagnetic signal. When communication systems operate at increasingly high frequencies, even these seemingly small disruptions become significant engineering obstacles. For researchers working towards sixth-generation (6G) wireless technology, finding ways to guide signals through compact circuits without losing their strength is a growing challenge.

A research team in India has demonstrated an approach that could help address this problem. Using a specially engineered silicon chip, scientists at the Jawaharlal Nehru Centre for Advanced Scientific Research (JNCASR), Bengaluru, have shown that terahertz waves can cross artificial barriers with very little signal loss, even while carrying high-speed data.

The work draws on a phenomenon called photonic Klein tunnelling, which describes how waves can pass through certain barriers without undergoing the substantial reflection or attenuation commonly associated with such obstacles.

6G telecommunication
Artistic illustration of photonic Klein tunnelling in a silicon valley photonic crystal chip. A terahertz signal carrying high-speed data crosses the engineered barrier (blue) without significant loss, supporting 100 Gbit/s data transmission for 6G communication. Source: PIB

In one of the three devices developed by the researchers, data transmission reached 100 gigabits per second (Gbps). The findings, published in Advanced Materials, offer a potential design approach for the compact terahertz circuits that future communication technologies may require.

Borrowing a Principle From Quantum Physics

The idea behind the research has its origins in a phenomenon associated with quantum mechanics. In quantum physics, Klein tunnelling describes the unusual ability of certain particles to pass through a potential barrier even when classical physics would predict that they should be reflected. Researchers have explored analogous behaviour in photonic systems, where electromagnetic waves can exhibit similar transmission characteristics.

The JNCASR team applied this principle through topological photonics, a field concerned with controlling the movement of electromagnetic waves using specially designed structures. They created a silicon photonic crystal resembling the honeycomb lattice of graphene, with triangular holes arranged in a precise pattern across a silicon slab. This arrangement produces boundary channels along which terahertz waves can propagate. These channels are resistant to certain forms of backscattering, helping signals retain their direction of travel.

The researchers then introduced artificial obstacles into these pathways by changing the dimensions of the triangular holes over a short section of the crystal. The experiment tested whether the waves could retain their transmission characteristics even when their pathways were deliberately disrupted.

When a Barrier Barely Interrupts the Signal

The results showed that the engineered structures could transmit terahertz waves across the barriers with remarkably little loss, provided the strength of the barrier remained below a characteristic coupling threshold of the crystal. A single barrier produced only about 1–2% signal loss. Even with two barriers placed consecutively, the loss remained around 2–3%. For comparison, a similar barrier in a conventional, non-topological waveguide caused a considerably greater reduction in transmission.

This is significant for circuit design because communication signals must often navigate multiple pathways and changes in geometry within a limited physical space. Reducing the losses associated with these obstacles could give researchers greater flexibility when designing compact terahertz components.

The team demonstrated the principle in three silicon devices. One incorporated two barriers in sequence. Another used an omega-shaped pathway containing four sharp bends and a central barrier. The third was a power splitter, which divided an incoming signal into two branches, with one branch containing an engineered barrier.

The devices were fabricated using high-resistivity silicon, a material compatible with established semiconductor manufacturing processes. Measurements across frequencies of 310–360 GHz closely matched the researchers’ computer simulations. In the power splitter, the two output signals remained nearly identical, indicating that the barrier had little effect on signal transmission.

What does 100 Gbps Mean in Practice?

The researchers also examined whether the structures could carry high-speed data, rather than simply transmit terahertz waves. The double-barrier device achieved a data rate of 48 Gbps, while the omega-shaped configuration supported 60 Gbps. The power splitter recorded the highest rate, reaching 100 Gbps using QAM-32 modulation. This technique encodes information through variations in the amplitude and phase of a signal.

At 100 Gbps, a five-gigabyte high-definition film could theoretically be transferred in less than half a second. The different transmission rates are important because they show how the approach performed across three distinct circuit configurations. The 100 Gbps result was achieved by the power splitter, rather than all three devices. The demonstration suggests that engineered barriers need not substantially compromise data transmission, even in circuits incorporating multiple pathways and sharp bends.

From a Laboratory Demonstration to Future 6G Hardware

Terahertz frequencies, which lie between microwaves and infrared light in the electromagnetic spectrum, are attracting interest for their capacity to support high-bandwidth communication. Their potential lies in accommodating large volumes of data at speeds that conventional wireless technologies may struggle to sustain. However, generating and transmitting terahertz signals is only part of the challenge. Researchers must also develop components capable of directing, dividing and processing these signals within compact devices.

The JNCASR study addresses this less visible aspect of future communication infrastructure. Its findings could help in developing integrated terahertz circuits that route and split signals on a single chip without substantial transmission losses. The next step for the research team is to explore whether the engineered barriers can be adjusted electrically, thermally or mechanically. This could eventually allow a device to redirect signals between different pathways on demand, potentially enabling more adaptable terahertz circuits.

The work remains an experimental demonstration of signal transmission at the chip level; it does not establish a commercially deployable 6G system. Further research will be needed to integrate these components into larger communication architectures.

Led by Abhishek Kumar, Assistant Professor at JNCASR and head of its Meta Optics Laboratory (MetoLab), the study involved joint first authors Samina Mulla and Sangram Kumar Sadhu. Researchers from JNCASR, IISER Kolkata, IIT Bombay, the Institute of Microelectronics at A*STAR, Singapore, and the University of Lille and CNRS, France, also contributed. The research offers a new way of thinking about how high-frequency signals can be guided through increasingly intricate circuits. As work on 6G progresses, such advances in the underlying hardware will help determine how much of the promised speed and bandwidth can eventually be translated into practical communication systems.

Continue Reading

Technology

India Unveils Three Homegrown AI Models, Covering 22 Indian Languages

India has released three indigenous AI models under the IndiaAI Mission. EKA-1 supports all 22 scheduled Indian languages, while Dhīr 2B and Dhīr 5B offer multilingual AI assistance with offline deployment capabilities.

Published

on

Computer programming code displayed on a screen, representing artificial intelligence and software development.
India's indigenous AI development gains momentum with the release of three foundation models under the IndiaAI Mission. Representational image. Image credit: Markus Spiske/ Pexels

India has released three indigenous artificial intelligence models under the IndiaAI Mission, with applications ranging from multilingual reasoning and coding to offline AI assistance in sensitive sectors such as defence, government and education. The models — EKA-1, developed by Soket Labs Technology and Research Private Limited, and Dhīr 2B and Dhīr 5B, developed by ZenteiQ AiTech Innovations, were unveiled in New Delhi under the IndiaAI Innovation Centre (Foundation Models) pillar.

The three models have different technical capabilities and deployment priorities. EKA-1 is designed as a large multilingual foundation model supporting all 22 scheduled Indian languages and English. The Dhīr models, meanwhile, focus on lightweight, locally deployable AI assistance, allowing organisations to process information without depending on continuous cloud connectivity.

IndiaAI mission
Officials from the Ministry of Electronics and Information Technology and representatives of Soket Labs and ZenteiQ at the launch of indigenous AI models EKA-1, Dhīr 2B and Dhīr 5B under the IndiaAI Mission in New Delhi.

EKA-1 Trained on 7.5 Trillion Tokens

Developed by Soket Labs, EKA-1 is a 26.3-billion-parameter foundation model trained on approximately 7.5 trillion tokens. It supports all 22 scheduled Indian languages alongside English and is designed for mathematical tasks, coding, reasoning and agentic applications.

The model uses an open, sparse hybrid architecture. Its intended applications include banking, financial services and cybersecurity, where understanding India’s digital ecosystem and sector-specific requirements is important. According to Abhishek Upperwal, CEO of Soket Labs, the model was developed with support from the IndiaAI Mission to address requirements within India’s banking, financial services and cybersecurity sectors.

Dhīr Models Target Offline and Secure AI Applications

ZenteiQ has introduced two open-source models, Dhīr 2B and Dhīr 5B, supporting English and 10 Indian languages. Their primary focus is secure deployment within organisations. The models can operate on-premise, enabling institutions to use AI systems within their own computing infrastructure rather than relying entirely on external cloud services.

They support document-grounded automation, knowledge retrieval and citizen-facing or enterprise services. The press release identifies defence, government, industrial and educational institutions as potential application areas, particularly in environments with limited internet connectivity or sensitive information.

Their lightweight architecture also allows deployment on mobile devices, according to ZenteiQ. The company says the models can run across different computing platforms, including graphics processing units (GPUs) and tensor processing units (TPUs). Prof. Sashikumar, CEO of ZenteiQ AiTech Innovations, said local deployment would allow users to retain data on their devices, improving privacy and security while reducing dependence on cloud connectivity.

Public Computing Infrastructure Supports Model Development

Both development teams were selected under the IndiaAI Innovation Centre pillar, which aims to build indigenous foundation models and large language models. The IndiaAI Mission provided access to subsidised national AI computing infrastructure and support for associated research expenses. These resources helped the selected teams develop their models.

Speaking at the launch, S. Krishnan, Secretary of the Ministry of Electronics and Information Technology, said indigenous AI models could strengthen India’s technological and strategic autonomy while creating opportunities to improve productivity across government, industry, research and education. He also pointed to AIKosh, the IndiaAI datasets platform, as a channel through which researchers, students, innovators and the wider public could access these resources and experiment with AI applications.

India’s Wider AI Development Programme

Approved by the Union Cabinet on March 7, 2024, the IndiaAI Mission operates through seven pillars: computing capacity, the Innovation Centre, the AIKosh datasets platform, application development, future skills, startup financing, and safe and trusted AI. The development of EKA-1 and the Dhīr models falls under the Innovation Centre pillar, which supports the creation of foundation models tailored to India’s requirements.

The models represent two different approaches to expanding domestic AI capabilities: large-scale multilingual processing and lightweight AI systems designed for secure local deployment. Their practical impact will depend on how effectively they perform across real-world applications and how widely organisations adopt them.

Continue Reading

Trending