In the dynamic landscape of cybersecurity, the emergence of highly contextualized, weaponized AI phishing attacks presents a new level of threat to organizations worldwide. As these attacks become more sophisticated, adversaries use artificial intelligence (AI) to craft convincing and targeted phishing. The need for equally advanced defense mechanisms has become crucial.

Active Threat Intelligence (ATI) is the basis for an effective Active Cyber Defence (ACD) aiming to offensively defend against ongoing cyberattacks. ATI is dynamic and focuses on the continuous and real-time collection, contextualisation and live analysis of immediate and ongoing cyber threats.

With the emergence of generative AI, adversaries have moved beyond cheap traditional phishing infrastructures using generic topics and massive volume to target a wide audience. Now, in the age of weaponized AI phishing, adversaries take advantage of the best aspects of spear phishing to enhance their traditional phishing attacks.

Using generative models, adversaries are now able to obfuscate their attacks with highly specialised contextualisation. This challenges detection mechanism to handle the complexity of diverse contexts in very large volumes as attackers are free to cheaply exploit anyone's contextual identity - brand, event or organisation.

To solve this dynamic problem, cyber defence and intelligence cannot base their detections on static components. Adversaries are going fully dynamic, and to fight them, active threat intelligence solutions like NORNA are needed.

NORNA is a fully enabled ATI SaaS product. Thanks to NORNA's aggressive discovery, contextualisation, categorisation and analysis of network level threats in real time, it is the best candidate for organisations to incorporate inside their ACD orchestration. Threat hunting has turned active and ATI is now needed for real-time blocking and threat mitigation.