File-based malware has long been among the most effective attack vectors employed by threat actors worldwide. While AI-powered detection technologies are coming to market to help address these growing risks, their outputs should be complemented by deterministic controls and human oversight, particularly in high-consequence environments.
Microsoft has downplayed the issue in official communications, stating that the summaries of the confidential emails were not exposed to anyone that did not already have access to the messages in question. There is always some concern about exactly where information goes once AI tools have ingested it, however.
Both suspected state-backed foreign adversaries and more run-of-the-mill cyber criminals appear to mostly still be focused on using AI tools to make their existing operations faster, more efficient and more error-free. OpenAI's ChatGPT and other models appear to have fairly strong guardrails that are highly resistant to creation of malware or automation of attack operations.



