
newsMar 12, 202621:46failed
AI as Tradecraft: How Threat Actors Are Operationalizing AI [Microsoft Threat Intelligence Podcast]
About this episode
In this episode of the Microsoft Threat Intelligence Podcast, host Sherrod DeGrippo is joined by Greg Schlomer and Vlad H. to discuss new research on Jasper Sleet, a North Korean–aligned threat actor incorporating AI into active operations.
The conversation examines how AI is being integrated across the attack lifecycle — from highly tailored phishing lures and fabricated job applicant personas to accelerating malware development and refining operational workflows. Rather than treating AI as a novelty, Jasper Sleet is using it to increase speed, scale, and adaptability while reducing many of the friction points that once slowed campaigns.
They also explore what this shift means for defenders. As AI compresses iteration cycles and lowers barriers to entry, traditional attribution signals evolve, influence operations become more convincing, and defensive teams must tighten the loop between intelligence, detection, and response. This is less about experimentation and more about the operationalization of AI as part of modern tradecraft.
In this episode you’ll learn:
How AI is changing the speed at which cyber operations evolve
Why jailbreaking AI models is often trivial for motivated adversaries
The strategic implications of AI leveling the playing field between threat actors
Some questions we ask:
Is there resistance among experienced malware authors to adopting AI?
Are we seeing fully AI-written malware in the wild?
What stands out about Jasper Sleet’s use of AI?
Resources:
View Greg Schloemer on LinkedIn
View Sherrod DeGrippo on LinkedIn
Related Microsoft Podcasts:
Afternoon Cyber Tea with Ann Johnson
The BlueHat Podcast
Uncovering Hidden Risks
Discover and follow other Microsoft podcasts at microsoft.com/podcasts
Get the latest threat intelligence insights and guidance at Microsoft Security Insider
The Microsoft Threat Intelligence Podcast is produced by Microsoft, Hangar Studios and distributed as part of N2K media network.
Get every episode summarized
Each time CyberWire Daily publishes, we email you a written briefing from the transcript — the topics, who appeared, and any specific claims, with the ad reads skipped.
Email me new episodesFree for 3 shows. No card needed.
Hosts & guests
No transcript yet
This episode has not been transcribed. Request it and it moves to the front of the queue.
More episodes
More from CyberWire Daily

Clear your calendar, it’s Patch Tuesday.
CyberWire Daily
Sep 9, 202630:40completed

Worming its way through WeChat.
CyberWire Daily
Sep 8, 202630:03completed

This call may be monitored. [Special Edition]
CyberWire Daily
Sep 7, 202638:33pending

When hackers control the clock. [T-Minus: Space-Cyber Briefing]
CyberWire Daily
Sep 6, 202623:43pending