IMF-hosted panel warned that AI lowers the skill needed for cyberattacks and makes fake emails, cloned voices and deepfakes cheap. Attacks that once took days can now finish in minutes. For a Thai SME, the practical risk is impersonation: verify any request to change bank details or transfer money through a second channel, enforce two-factor login on email and banking apps, and train staff to spot fake messages. Also check that outside IT vendors and software you use have up-to-date security. The article gives no Thai-specific rule or deadline.