South Korean firm Genians links Kimsuky group to AI tools that run locally to avoid detection.
Published
North Korean hackers have developed artificial intelligence tools to automate cyberattacks, according to a report from South Korean cybersecurity firm Genians. The firm linked the Kimsuky group to tools designed for running AI models locally, which helps threat actors avoid outside detection.
The development represents an advancement in state-sponsored cyber capabilities, enabling more sophisticated operations that are harder to trace. By running AI models locally rather than on external servers, the hackers can process data and orchestrate attacks without leaving digital footprints that cybersecurity researchers might monitor.
In other AI news, Google published a blog post outlining "the next chapter of our AI momentum" on its official blog. The Wall Street Journal also reported on leadership changes within Google's AI division, though details of the shuffle were not specified in the report.
Three new research papers appeared on arXiv in the AI domain: one on multi-label graph foundation models for node classification across different graph domains; another on EntropyMoE, which presents entropy-aware sparse expert routing for tokenizer-free large language models; and a third on interpreting mixture-of-experts reward models through contribution contrast methods.
Sources: 1.