Loading story…
Security teams are facing a surge in high-severity vulnerabilities, with AI accelerating exploit development and enabling attackers to weaponize flaws more rapidly. According to Intruder's 2025 Exposure Management Index, organizations are seeing a 20% increase in high-severity issues, while also improving their response time to critical vulnerabilities, with 89% fixed within 30 days. The rapid evolution of AI-generated code, cloud sprawl, and shadow IT are contributing to new exposures, and supply chain compromises continue to disrupt critical sectors. Security teams are adapting by maturing their remediation processes and integrating solutions directly into developer workflows, but resource constraints remain a challenge.
At the same time, the enterprise browser has emerged as a major threat surface, with the Browser Security Report 2025 highlighting that most identity, SaaS, and AI-related risks now converge in the browser. GenAI tools are now the top channel for data exfiltration, with 77% of employees pasting data into GenAI prompts—often from unmanaged, personal accounts. Unmonitored browser extensions and new AI-powered browsers are creating parallel attack surfaces that legacy DLP and EDR tools struggle to address. Enterprises are being urged to rethink their security controls to address these evolving risks, as traditional solutions are increasingly inadequate against the pace and complexity of AI-driven threats.
Track how attackers are adapting to this technology.
1 event from the most recent confirmed update back to the earliest known activity.
The Register and The Hacker News published reports highlighting how AI is enabling bad actors and describing emerging browser-based threats facing enterprise security teams. The references indicate a broad industry assessment rather than a discrete breach, victim disclosure, or law-enforcement action.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Artificial intelligence is rapidly transforming both the threat landscape and defensive strategies in cybersecurity, prompting CISOs and security leaders to rethink their approaches. A global study by Gigamon found that 86% of CISOs now view metadata and packet-level data as essential for detecting threats in complex hybrid cloud environments, but 97% admit to making trade-offs that leave visibility gaps. The rise of AI-driven attacks is fueling demand for real-time visibility and observability tools, with 75% of CISOs regarding public cloud as their highest security risk and 73% considering moving workloads back to private clouds. Security teams are investing heavily in AI-specific security tools, with 73% of companies spending over $1 million annually, yet 70% cite the rapid pace of AI development as their top concern. Recent high-profile breaches, such as those at LexisNexis Risk Solutions and McLaren Health Care, illustrate the increasing scale and sophistication of attacks, often amplified by AI. AI is accelerating the reconnaissance phase of attacks, enabling adversaries to map environments and identify vulnerabilities with unprecedented speed and precision, though human direction remains necessary for effective exploitation. The proliferation of AI-generated code, including through practices like 'vibe coding,' introduces new risks as less experienced developers may overlook security fundamentals, leading to insecure applications. Agentic AI systems, which act autonomously or on behalf of users, present urgent challenges in authentication, authorization, and identity management, with experts calling for scalable frameworks and robust credentials to prevent security lapses. CISOs are urged to build security into the design phase of software development, leveraging platform-native controls and enforcing policies like Row Level Security to minimize risk. The integration of AI into security operations is seen as both an opportunity and a challenge, requiring adaptive access solutions, post-quantum cryptography, and continuous monitoring. As AI reshapes digital transformation, organizations must balance the benefits of rapid innovation with the imperative to secure their environments against increasingly sophisticated, AI-powered threats. The consensus among experts is that security must evolve in tandem with AI capabilities, emphasizing proactive risk management, cryptographic agility, and a culture of security awareness across all levels of the organization.
Jun 29, 2026
The rapid integration of artificial intelligence into enterprise environments is fundamentally reshaping the cybersecurity landscape, introducing new risks and operational challenges. Analyst firm Gartner has advised organizations to block the use of AI-powered browsers, such as Perplexity’s Comet and OpenAI’s ChatGPT Atlas, due to concerns that default settings prioritize user experience over security, potentially exposing sensitive data to cloud-based AI backends. Cloudflare has reported blocking over 416 billion AI bot scraping requests in five months, highlighting the scale at which AI-driven automation is targeting web content and raising concerns about the sustainability of current internet business models. Meanwhile, security leaders are increasing budgets and focusing on cloud and data security, but many still feel unprepared to address the evolving threat landscape, as AI accelerates both attack and defense capabilities. Industry reports and expert commentary emphasize that attackers are leveraging AI and automation to industrialize cybercrime, enabling faster, more scalable, and more sophisticated attacks. The Fortinet Cyberthreat Predictions Report for 2026 notes that AI-powered agents are automating key stages of the attack chain, from credential theft to lateral movement and data monetization, while the proliferation of non-human identities (machine-to-machine interactions) is becoming a critical security concern. As organizations face mounting pressure to defend at machine speed, the need for robust identity management, automated threat intelligence, and board-level prioritization of cyber resilience is more urgent than ever, especially for critical infrastructure sectors where the consequences of a breach can be catastrophic.
Jun 29, 2026
Security researchers and industry experts are raising alarms about the growing use of artificial intelligence (AI) in both offensive and defensive cybersecurity operations. Attackers are leveraging AI to bypass advanced security controls, as demonstrated by a researcher who used AI to defeat an "AI-powered" web application firewall, and by the emergence of new malware that exploits AI model files and browser vulnerabilities to evade detection and exfiltrate credentials. Meanwhile, defenders are grappling with the proliferation of unsanctioned AI tools in the workplace, the challenge of auditing AI decision-making, and the surge in AI-powered bug hunting, which has led to a dramatic increase in vulnerability discoveries and bug bounty payouts. The risks are compounded by the lack of clear AI usage policies, the potential for data leaks through generative AI tools, and the difficulty in monitoring or controlling how sensitive information is processed and stored by these systems. Industry reports highlight that a significant portion of employees use unauthorized AI applications, often exposing sensitive data without IT oversight, and that prompt injection and model manipulation are now common vulnerability types. The security community is also debating the extent to which ransomware and other attacks are truly "AI-driven," with some reports criticized for overstating the role of AI in current threat activity. As organizations rush to adopt AI for efficiency and innovation, experts urge the implementation of robust governance, continuous monitoring, and red-teaming to anticipate and mitigate the evolving risks posed by both sanctioned and shadow AI systems. The rapid evolution of AI in cybersecurity is forcing a reevaluation of traditional defense models, emphasizing the need for transparency, operational oversight, and adaptive security strategies.
Jun 29, 2026