Star in the Machine Fog: How AI Became Weapon, Target and Voice in the Browser
AppSec engineer Yuri Tumanov from Rostelecom, together with Igor Korkin of Positive Technologies and Oksana Dokuchaeva of FMBA Russia, examines how generative AI reshapes attack economics and defensive controls. The article outlines five distinct roles of AI in cybersecurity: accelerator of attacks, trusted assistant under compromise, leakage vector, protective shield, and direct target of prompt injection and data poisoning. It stresses that AI does not invent new threats but removes friction from social engineering, code generation and tool orchestration while expanding the attack surface through browser sessions, retrieval corpora and agent permissions. The authors advocate deterministic policy engines, provenance tracking, step-up approvals and device posture checks rather than relying on system prompts alone. The piece is framed as a cyberpunk narrative grounded in real AppSec, blue-team and threat-modeling practices for authorized testing environments.
Habr•AI Security
