"AI threats are real - it's not some kind of urban myth": Microsoft UK security head on why your business should be prepared for a new generation of AI cyber threats

Date:
Tue, 27 Oct 2026 19:05:00 +0000

Description:
In the AI security age, responsibility for security lies on everyone in an organization, Microsoft warns.

FULL STORY ======================================================================Copy link Facebook X Whatsapp Reddit Pinterest Flipboard Threads Email Share this article 0 Join the conversation Follow us Add us as a preferred source on Google Newsletter Subscribe to our newsletter As AI becomes an increasingly important part of our everyday lives, the role it plays in cybersecurity for both attackers and defenders is coming under rising scrutiny.

Microsoft recently released its Digital Defense Report (DDR) highlighting
the role that AI is playing in crafting new and more devious cyberattacks , with businesses being hit with more threats than ever before. But Microsoft
is also using its own AI tools such a Copilot to help support its digital crimes unit, showing that the attackers wont have all the advantages. Latest Videos From TechRadar Watch full video here:

At the recent Microsoft Frontier Tour London event, I spoke to Dr Jon Davies, Chief Security Adviser, Microsoft UK, to find out more. AI threats are here Frontier AI is transforming the threat landscape, Davies tells me. Right now, AI threats are real, it's not an urban myth, or something we're going to see in 2030. You may like Why AI is accelerating old cyber risks, not creating
new ones C-suite executives need to upskill themselves to really understand the threats Agentic AI is increasing the pressure on organizations to reduce cyber risk exposure

The DDR found that as AI becomes more widely available, the barrier of entry into cybercrime is being lowered, allowing hackers to launch a record number of campaigns against consumers and businesses alike.

The UK was particularly affected, becoming the most targeted country for nation-state and geopolitical cyber activity in Europe, facing 76 observed events in the past year, and ranking fifth in the world for countries where customers are most frequently impacted by cyber threats. Are you a pro? Subscribe to our newsletter Sign up to the TechRadar Pro newsletter to get
all the top news, opinion, features and guidance your business needs to succeed! Contact me with news and offers from other Future brands Receive email from us on behalf of our trusted partners or sponsors By submitting
your information you agree to the Terms & Conditions and Privacy Policy and are aged 16 or over.

Davies notes that the AI threat has been building for a while, as attackers turn to automation to carry out more advanced attacks - with so-called swarm attacks" becoming particularly more common as attackers get agents to do
their dirty work

We're getting to the point where the technology, compute, and storage is catching up with the ambition of the attacker, he says, pointing out that defenders are embracing AI too.

We've been solving one problem at a time as (threats) have evolved, he adds, the opportunity with agentic AI is to elevate the human up into the orchestration. What to read next UK faces the most state-sponsored cyberattacks in Europe as AI narrows the attack timeline from days to minutes The biggest AI security risk is doing nothing AI has crossed a cybersecurity redline now what? (Image credit: iStock) But despite all the AI intelligence being funneled into creating new and more complicated attacks, more basic forms of scam like phishing are still proving incredibly effective, showing that the human will always remain the weakest link when it comes to cybersecurity.

The DDR found phishing attacks jumped globally from 7% to 23% of incident-response intrusions year-over-year, with attacks using fake meeting invites and calendar markers among the scams on the rise, and Davies highlights how criminals are taking information gathering on specific C-suite individuals to a new high in order to get them to click on a link.

An attacker has no ethical line, he points out, phishingis still the front door for any organization(and) I don't think it's going to go away - with AI on its side, it's only going to get more real and harder to detect.

So where does the responsibility lie when it comes to awareness? Davies says it should be a combination of individual and collective culpability - which means those annoying phishing tests your employer sends you are probably here to stay.

The whole point of those training exercises is to help educate us, show us what the attackers are doingI dont think we should be embarrassed if weve clicked a link in one of those exercises, as the point is to educate and train.

Its everyones responsibility to put a seat belt on, you are accountable to
it, and regardless of who you are in your personal life, you are responsible for cybersecurity. Were at that step change now where its not just the cybersecurity teams responsible for security - it is everyone within the organization.

Davies notes that security can be the seatbelt for AI transformation,
likening it to the introduction of the seatbelt in cars - as although they worked from day one, it still took some time to catch on.

Security is the same way for enterprises - we can buckle up, he adds, noting that the seatbelt doesnt slow the car down, and eventually the change happened, making seatbelts (and safety overall) a key reason why we might buy a specific car. So with the huge amount of threats facing cybersecurity defenders on a daily basis, how can security professionals stay positive?

Its really tough, Davies says, the threat landscape is evolving extremely, extremely fast at the moment. It has to be embedded from top to bottom - from the board level downwards through the C-suite and down to the employees - but it also then needs to be trained up from frontline staff.

He adds that given the number of widespread cybersecurity stories hitting the headlines these days, more and more C-suite executives are becoming aware of the need to stay protected - and challenging their CISO about what they plan to do about it, and how they can recover if the worst happens.

Were having these conversations quite regularly, he says, as a member of the security profession, weve asked for a seat at the table for a number of years - and weve finally got that.

Davies points out that the DDR isnt just a commercial or PR exercise - it is Microsofts view from the front lines of the battle against the latest cybersecurity threats.

Weve got skin in the game, he says, there is no other organization on the planet that can do this at that level, its giving back what were able to
share to help organizations measure their risk and threat.

The physics of cyber are changing, he concludes, weve got variables that we can change - but they (attackers) also have variables they can change on
their sideit's a scary place out there...the world that we're living in right now is very dynamic. Follow TechRadar on Google News and add us as a
preferred source to get our expert news, reviews, and opinion in your feeds.



======================================================================
Link to news story: https://www.techradar.com/pro/security/ai-threats-are-real-its-not-some-kind-o f-urban-myth-microsoft-uk-security-head-on-why-your-business-should-be-prepare d-for-a-new-generation-of-ai-cyber-threats


--- Mystic BBS v1.12 A49 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)