Loading story…
Artificial intelligence is rapidly transforming the cyber threat landscape, introducing new risks and amplifying existing ones. Recent research revealed that 65% of top AI firms have leaked verified secrets such as API keys and credentials on GitHub, exposing sensitive data and private models to potential compromise. The prevalence of shadow AI—unauthorized or unmonitored AI tools used within organizations—has become a significant blind spot for security teams, as employees increasingly adopt generative AI tools like ChatGPT and Gemini without official oversight. This unregulated use heightens the risk of data leakage and undermines established security controls.
Simultaneously, threat actors are leveraging AI to enhance spear phishing campaigns, targeting IT leaders with highly convincing, context-aware messages that are difficult to detect. Security teams are also adopting generative AI to improve open-source intelligence (OSINT) gathering, using these tools to expand keyword searches and identify evolving threat actor slang. The convergence of AI-driven attack techniques and the widespread exposure of credentials underscores the urgent need for organizations to implement robust secret scanning, monitor shadow AI usage, and adapt defenses to counter increasingly sophisticated, AI-enabled threats.
Track how attackers are adapting to this technology.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
Follow how adversaries are adapting to this technology, and where it touches your stack today.
4 references tracked. Mallory keeps watching after this page renders.
scworld.com
Open sourcearcticwolf.com
Open sourcewelivesecurity.com
Open sourceflashpoint.io
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Security researchers and industry experts are raising alarms about the growing use of artificial intelligence (AI) in both offensive and defensive cybersecurity operations. Attackers are leveraging AI to bypass advanced security controls, as demonstrated by a researcher who used AI to defeat an "AI-powered" web application firewall, and by the emergence of new malware that exploits AI model files and browser vulnerabilities to evade detection and exfiltrate credentials. Meanwhile, defenders are grappling with the proliferation of unsanctioned AI tools in the workplace, the challenge of auditing AI decision-making, and the surge in AI-powered bug hunting, which has led to a dramatic increase in vulnerability discoveries and bug bounty payouts. The risks are compounded by the lack of clear AI usage policies, the potential for data leaks through generative AI tools, and the difficulty in monitoring or controlling how sensitive information is processed and stored by these systems. Industry reports highlight that a significant portion of employees use unauthorized AI applications, often exposing sensitive data without IT oversight, and that prompt injection and model manipulation are now common vulnerability types. The security community is also debating the extent to which ransomware and other attacks are truly "AI-driven," with some reports criticized for overstating the role of AI in current threat activity. As organizations rush to adopt AI for efficiency and innovation, experts urge the implementation of robust governance, continuous monitoring, and red-teaming to anticipate and mitigate the evolving risks posed by both sanctioned and shadow AI systems. The rapid evolution of AI in cybersecurity is forcing a reevaluation of traditional defense models, emphasizing the need for transparency, operational oversight, and adaptive security strategies.
Jun 29, 2026
Organizations are facing a surge in cyberattacks driven by the rapid adoption of artificial intelligence (AI) and machine learning technologies, with threat actors leveraging these tools to amplify risks across mobile devices, APIs, and cloud environments. Reports highlight that 85% of organizations have experienced an increase in mobile device attacks, with AI-assisted threats such as SMS-phishing and deepfakes becoming more prevalent, while only a minority have dedicated defenses in place. The integration of generative AI and large language models (LLMs) into business applications has led to a proliferation of APIs, introducing new attack vectors like prompt injection and data exfiltration that traditional security tools struggle to detect. Vulnerabilities in widely used AI platforms, such as ChatGPT, have exposed millions of users to risks including data leakage and privacy breaches, underscoring the challenges of securing AI-driven systems. Despite significant investments in security tools and automation, human behavior remains a leading cause of data loss, with insider risks, misdirected emails, and credential theft persisting as major concerns. The complexity of managing sprawling data across cloud and SaaS platforms further complicates efforts to secure sensitive information. Security leaders are increasingly aware that AI is a double-edged sword—while it offers enhanced efficiency and predictive capabilities, it also empowers adversaries with sophisticated attack methods. The lack of comprehensive AI security policies and the difficulty in aligning AI strategies with business goals have left many organizations unprepared to address the evolving threat landscape, making the need for robust, adaptive security frameworks more urgent than ever.
Jun 29, 2026
Organizations are rapidly adopting AI-powered tools and agents across business processes, often without adequate oversight or security controls. As AI agents become more autonomous, they are increasingly granted access to sensitive systems, data, and workflows, sometimes without formal approval or visibility from IT and security teams. This phenomenon, known as 'Shadow AI,' introduces significant blind spots for traditional security tools, as these agents can operate with hidden identities and privileges. Studies have shown that a large proportion of enterprise employees use generative AI tools like ChatGPT, frequently pasting sensitive information such as personally identifiable information (PII) and payment card data into these platforms, often through unmanaged personal accounts. This uncontrolled usage creates substantial risks of data leakage, compliance violations, and potential misuse of corporate data for AI model training. Security research highlights that 45 percent of enterprise employees use generative AI tools, with 77 percent of those users copying and pasting data into chatbots, and 22 percent of those pastes containing PII or PCI data. Furthermore, 40 percent of file uploads to generative AI sites include sensitive data, with a significant portion coming from non-corporate accounts, making it difficult for organizations to monitor or control data exfiltration. The rise of autonomous AI agents, capable of acting independently and integrating with APIs and workflows, further complicates the security landscape, as these agents can trigger actions and access data without direct human oversight. Industry experts warn that unchecked proliferation of AI agents could lead to disastrous consequences, including unauthorized access to business processes and sensitive information. The OpenID Foundation and other organizations are calling for the development of AI-specific identity and access management standards to address these risks. Ethical considerations are also paramount, as the design and deployment of AI agents must prioritize principles such as transparency, accountability, and alignment with human values to prevent costly errors and security incidents. Security leaders are urged to extend governance practices to cover AI agents, implement robust monitoring and access controls, and foster a culture of cybersecurity awareness to mitigate the risks posed by shadow AI. The convergence of technical, regulatory, and ethical challenges underscores the urgent need for coordinated action to secure the expanding ecosystem of AI agents within enterprises.
Jun 29, 2026