Learning Objectives:

  • Understand the impact of artificial intelligence on the cyber threat landscape.

  • Analyse how AI is being used by attackers to enhance and automate attacks.

  • Recognise the emerging threat of deepfakes and synthetic media.

  • Identify strategies for defending against AI-enabled attacks.

7.1 The AI-Driven Threat Landscape

AI is reshaping the cyber threat landscape, enabling attackers to identify vulnerabilities, automate attacks, and scale cyber intrusions more rapidly. The MFSA’s Cyber Threats Awareness Brief identifies AI-driven and AI-enabled threats as the largest root cause category for early 2026, including AI-assisted cloud intrusions, malicious AI-themed extensions, infostealers abusing AI ecosystems, autonomous vulnerability discovery, and AI agent exposure in enterprise environments . The regulator emphasises that AI is no longer just a social engineering enhancer; it is now a direct operational threat vector .

The Monetary Authority of Singapore (MAS) has identified frontier AI models as a significant threat to financial institutions’ cyber defences . Frontier AI models can find and exploit system vulnerabilities, significantly compressing the timelines for patching, testing, and remediation . This compression means that institutions have less time to respond to newly discovered vulnerabilities before they are exploited.

The MAS has established a joint task force with the banking industry to strengthen defences against AI-driven cyber threats . The task force will develop industry guidance, run defensive tool trials, and build expertise across financial institutions . The industry remains vigilant, agile, and committed to strengthening resilience .

7.2 AI as a Weapon

Generative AI tools have made it cheaper and faster to produce convincing scam content, from fake audio clips impersonating executives to fabricated identity documents used in account opening fraud . The MFSA emphasises that AI is no longer just a social engineering enhancer; it is now a direct operational threat vector that can automate attacks at scale .

Key AI-enabled threats include:

  • Deepfake-Driven Fraud: Deepfakes and synthetic identities are eroding traditional verification controls. Europol’s disruption of a €50 million investment fraud network illustrates the scale of organised cyber-enabled fraud operations .

  • AI-Powered Phishing: AI-enabled phishing can be more personalised and persuasive “at scale”, increasing the likelihood of successful attacks .

  • Autonomous Vulnerability Discovery: AI can be used to find system vulnerabilities faster and more efficiently than