CyberWire Daily

AI as Tradecraft: How Threat Actors Are Operationalizing AI [Microsoft Threat Intelligence Podcast]


Listen Later

In this episode of the Microsoft Threat Intelligence Podcast, host⁠ ⁠⁠Sherrod DeGrippo is joined by Greg Schlomer and Vlad H. to discuss new research on Jasper Sleet, a North Korean–aligned threat actor incorporating AI into active operations. 

The conversation examines how AI is being integrated across the attack lifecycle — from highly tailored phishing lures and fabricated job applicant personas to accelerating malware development and refining operational workflows. Rather than treating AI as a novelty, Jasper Sleet is using it to increase speed, scale, and adaptability while reducing many of the friction points that once slowed campaigns. 

They also explore what this shift means for defenders. As AI compresses iteration cycles and lowers barriers to entry, traditional attribution signals evolve, influence operations become more convincing, and defensive teams must tighten the loop between intelligence, detection, and response. This is less about experimentation and more about the operationalization of AI as part of modern tradecraft. 


In this episode you’ll learn:      

  • How AI is changing the speed at which cyber operations evolve 

    • Why jailbreaking AI models is often trivial for motivated adversaries 

      •  The strategic implications of AI leveling the playing field between threat actors 

        Some questions we ask:     

        • Is there resistance among experienced malware authors to adopting AI? 

          • Are we seeing fully AI-written malware in the wild? 

            • What stands out about Jasper Sleet’s use of AI? 

               

              Resources:  

              View Greg Schloemer on LinkedIn  

              View Sherrod DeGrippo on LinkedIn  

               

              Related Microsoft Podcasts:                   

              • Afternoon Cyber Tea with Ann Johnson 

                • The BlueHat Podcast 

                  • Uncovering Hidden Risks     


                    Discover and follow other Microsoft podcasts at microsoft.com/podcasts  


                    Get the latest threat intelligence insights and guidance at Microsoft Security Insider 

                     

                    The Microsoft Threat Intelligence Podcast is produced by Microsoft, Hangar Studios and distributed as part of N2K media network. 

                    Learn more about your ad choices. Visit megaphone.fm/adchoices

                    ...more
                    View all episodesView all episodes
                    Download on the App Store

                    CyberWire DailyBy N2K Networks

                    • 4.8
                    • 4.8
                    • 4.8
                    • 4.8
                    • 4.8

                    4.8

                    1,006 ratings


                    More shows like CyberWire Daily

                    View all
                    Hacked by Hacked

                    Hacked

                    187 Listeners

                    Security Now (Audio) by TWiT

                    Security Now (Audio)

                    2,011 Listeners

                    WSJ Tech News Briefing by The Wall Street Journal

                    WSJ Tech News Briefing

                    1,649 Listeners

                    Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec by Jerry Bell and Andrew Kalat

                    Defensive Security Podcast - Malware, Hacking, Cyber Security & Infosec

                    372 Listeners

                    Risky Business by Risky Business Media

                    Risky Business

                    371 Listeners

                    SpyCast by SpyCast

                    SpyCast

                    1,531 Listeners

                    SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast) by Johannes B. Ullrich

                    SANS Internet Stormcenter Daily Cyber Security Podcast (Stormcast)

                    651 Listeners

                    Smashing Security by Graham Cluley

                    Smashing Security

                    317 Listeners

                    Click Here by Recorded Future News

                    Click Here

                    418 Listeners

                    Darknet Diaries by Jack Rhysider

                    Darknet Diaries

                    8,077 Listeners

                    Cybersecurity Today by Jim Love

                    Cybersecurity Today

                    175 Listeners

                    Hacking Humans by N2K Networks

                    Hacking Humans

                    315 Listeners

                    CISO Series Podcast by David Spark, Mike Johnson, and Andy Ellis

                    CISO Series Podcast

                    195 Listeners

                    Defense in Depth by David Spark, Steve Zalewski, Geoff Belknap

                    Defense in Depth

                    73 Listeners

                    Cybersecurity Headlines by CISO Series

                    Cybersecurity Headlines

                    139 Listeners