Threat groups are using AI to generate malicious code, automate parts of their operations, abuse enterprise AI systems, and target the software supply chains that many companies rely on. One campaign highlighted by CrowdStrike sent nearly 200,000 requests to an AI model service in just two minutes, demonstrating how quickly attackers can abuse enterprise AI infrastructure. The company said this trend is likely to continue as advanced AI systems make vulnerability discovery and exploit development faster. AdvertisementThe software supply chain is under pressureAttackers are targeting package registries, developer tools, and AI frameworks to reach downstream victims. For businesses adopting AI quickly, AI deployment without strong identity controls, monitoring, and software supply chain protections could create new risks faster than security teams can respond.