Cyber Threats

• Industry experts warned at a regional forum in Tokyo on Thursday that the rapid adoption of artificial intelligence is escalating cybersecurity risks across Asia. • AI is being used to create more sophisticated and harder-to-detect threats, specifically ranging from advanced scams to high-quality deepfakes. • These evolving methods are creating a significantly larger negative impact on businesses, as traditional security measures struggle to keep pace with AI-driven attacks.

• CrowdStrike's 2026 Technology Threat Report identifies the global technology industry as the most targeted sector for cyberattacks, driven primarily by eCrime and state-sponsored actors from China and North Korea. • A critical vulnerability was highlighted involving a software package downloaded approximately 100 million times per week, posing a risk for one of the largest supply chain incidents recorded. • Threat actors are increasingly shifting their focus toward software development environments to compromise the integrity of the digital supply chain.

• The EU is investing €1.3 billion (approximately $1.5 billion) into AI, cybersecurity, and digital skills via the Digital Europe Programme from 2025 to 2027. • New regulatory frameworks, specifically the NIS2 Directive and the Digital Operational Resilience Act, became effective in October 2024 and January 2025. • These mandates make cybersecurity investments a legal requirement for critical sectors, including transport, energy, and financial services, to protect essential infrastructure.

• Sam Woods, the outgoing chief of the Prudential Regulation Authority (PRA), has identified AI-driven cybersecurity risks as the top threat facing the banking sector. • The regulator expressed significant concern regarding existing vulnerabilities within lenders' IT systems, which could be exploited by sophisticated AI tools. • This warning highlights a critical shift in the threat landscape, as AI enables more complex and frequent cyberattacks against financial infrastructure.

• AI-powered cyber threats are projected to become significantly more autonomous and sophisticated by 2026. • These advanced attacks are outstripping traditional security frameworks, allowing threat actors to bypass conventional defenses with greater ease. • This shift matters because AI fundamentally reshapes the cybersecurity landscape, increasing the danger and scale of digital incursions.

• Policy makers are currently working to establish a coordinated AI-security regime focused on frontier models, critical infrastructure, and voluntary government reviews. • Simultaneously, cyber attackers are evolving their tactics by refining malware distribution and abusing familiar platforms to target ordinary users at scale. • This tension highlights a growing gap between high-level government security frameworks and the rapid proliferation of low-friction criminal tooling.

• Microsoft is integrating artificial intelligence into its security operations to better combat evolving cyber threats and hacker activity. • The strategy utilizes an AI model revealed by Anthropic in April, which has demonstrated a high proficiency in identifying vulnerabilities within major operating systems and web browsers. • This development is significant because the AI was not originally designed for cybersecurity, yet it can uncover critical software flaws that traditional methods might miss.