Kaspersky Taiwan technical director Hsieh Chang-hsuan argues that generative AI lowers the bar for reconnaissance, phishing copywriting and some coding work, turning attacks from periodic to near-continuous, while the security fundamentals — patching, phishing awareness, boundary protection — remain unchanged; only the pace and scope have shifted. He says threat intelligence must be source-trustworthy, timely, contextually relevant, confidence-scored and actionable, with AI handling scale and correlation while experts validate and interpret findings, since unverified automated output can produce false positives that hurt operations. The article lays out a five-layer enterprise AI/agent defense model: enterprise boundary management, client-side AI (Shadow AI) control, agent interface and outbound-connection protection, LLM and RAG input/output validation, and core identity, endpoint, server and network security, warning that models, datasets, plug-ins and skill packages can all become supply-chain entry points (citing OWASP risks such as prompt injection and sensitive information disclosure).