This paper looks at the current state of the art around AI/LLM tooling, both in terms of how it works, as well as the risks and benefits inherent with its use. A survey of publicly available information around how these technologies have been applied to attack and defence is provided, as well as how the collected material can inform current and future GÉANT Security Policy. Current trends show we must continue to work on phishing-resistant MFA, bolster user education around highly realistic hostile communications, such as phishing, and have a clear and direct policy around decision making that takes into consideration the falsifiable nature of human communication. Given the current state of how AI is perceived by the technical community, it is critical to remember that AI is just another technology, and its evaluation should be done in terms of real cost, real risk, and real benefit.