Security shifts to the human layer as AI scams surge

Cybercriminals are increasingly using AI-themed social engineering (manipulating people into revealing sensitive information or taking harmful actions) to distribute malware, steal credentials, and commit fraud by impersonating popular AI platforms like ChatGPT and Claude. Both Microsoft and Google have documented how attackers are adapting traditional phishing (deceptive emails/messages designed to steal information) and impersonation tactics to exploit employees' growing use of AI tools and cloud services, rather than developing entirely new attack techniques. Security researchers warn that the threat has shifted from technical vulnerabilities to the human layer, where employees' trust and behavior become the target.