According to The Verge, AI models are now making phishing attacks faster and more convincing while simultaneously giving Big Tech better defenses. The story centers on Vivian's Door, an Alabama nonprofit whose leader received reports of scam emails circulating worldwide in her name, soliciting donations. The nonprofit's small staff had no way to respond at scale.
The AI security gap is widest at the bottom. Large tech companies can afford AI-powered defense systems. Smaller hospitals, regional banks, and nonprofits hold payroll data, patient records, and donor information. They face faster, cheaper attacks with skeleton crews to catch them. A breach doesn't set back a startup for a quarter. It can shut down a hospital or drain a nonprofit's reserves.
Expect regulators and insurers to start demanding proof of cyber hygiene, not just compliance checkboxes. The question will shift from "Do you have a security plan?" to "If attackers can write convincing phishing emails in seconds, what's your actual backup plan?"
The real danger isn't that AI turns every hacker into an elite operator. It's that AI makes mediocre attackers good enough to fool overstretched staff at places that can't afford a bad week. If you run a regional bank, a hospital network, or a nonprofit with sensitive data, treat phishing like a board-level issue now. Not after the first breach.
Filed to the Technology desk · Sep 28