Loading story…
Recent episodes of prominent cybersecurity podcasts have highlighted the growing risks associated with artificial intelligence, deepfakes, and evolving attack vectors. One show discussed Tinder's plans to leverage AI for user engagement, raising privacy concerns about access to users' camera rolls, while also warning about convincing deepfakes impersonating public figures like Warren Buffett to spread fraudulent investment advice. The same episode touched on the broader implications of agentic AI and the potential for such technologies to disrupt traditional security roles and processes.
Another podcast segment covered a range of security topics, including the dangers of phishing attacks targeting lost phone owners, the emergence of new AI-driven threats, and the importance of Zero Trust endpoint protection. Expert guests provided insights into how businesses can adapt to these challenges, emphasizing the need for robust security strategies in the face of increasingly sophisticated adversaries leveraging AI and social engineering techniques.
Track how attackers are adapting to this technology.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
AI technologies are rapidly transforming the landscape of cybercrime, enabling scammers to create highly convincing deepfakes and personalized attacks that are increasingly difficult for individuals and organizations to detect. Recent research and industry reports highlight a surge in AI-powered scams, with over 70% of consumers encountering scams in the past year and deepfake audio and video emerging as top concerns. Attackers are leveraging social media as a primary channel to target victims, exploiting the widespread use of mobile devices, which often lack adequate security protections. The sophistication of these attacks is exemplified by incidents such as the $25 million fraud at Arup, where a deepfaked videoconference deceived an employee into transferring company funds. The growing threat of deepfakes and synthetic media is driving a cybersecurity arms race, as organizations struggle to keep pace with evolving attack techniques. Security leaders are increasingly focused on strengthening identity controls, as insurers now scrutinize the maturity and enforcement of identity and access management practices before offering coverage. Research also reveals that current identity document verification systems are hampered by limited and non-diverse training data, making them vulnerable to advanced fraud tactics. As AI continues to lower the barrier for attackers, both technical and human-centric defenses must adapt to counter the risks posed by synthetic identities and technology-enhanced social engineering.
Jun 29, 2026
A recent Gartner survey revealed that 62% of organizations have experienced deepfake attacks within the past year, highlighting the rapid adoption of AI-driven social engineering tactics. These attacks often involve the use of deepfake technology to impersonate executives, tricking employees into transferring funds or divulging sensitive information. Akif Khan of Gartner emphasized that social engineering remains a reliable attack vector, and the introduction of deepfakes makes it even more challenging for employees to detect fraudulent activity. Automated defenses alone are insufficient, as employees are now the frontline defense against these sophisticated impersonation attempts. The survey also found that 32% of organizations faced attacks targeting AI applications, particularly through prompt injection and manipulation of large language models (LLMs). Such adversarial prompting can cause AI chatbots and assistants to generate biased or malicious outputs, further expanding the threat landscape. Flashpoint analysts corroborate these findings, reporting that threat actors are actively discussing and deploying AI-powered tools in underground communities. These include specialized malicious AI models and AI-generated attack plans, which are being used to automate and scale cybercriminal operations. The most immediate threat identified is the use of AI to exploit human psychology, with attackers leveraging AI to create convincing phishing lures and fabricated realities that undermine traditional authentication methods based on voice and visual cues. Financial institutions are particularly vulnerable, as demonstrated by recent incidents where finance workers were deceived by AI-generated content. The rise of 'Dark GPTs' and Attack-as-a-Service (AaaS) offerings on the dark web further illustrates the commercialization and accessibility of AI-driven cybercrime. Security experts recommend a defense-in-depth approach, combining robust technical controls with targeted measures for emerging AI risks. AI-powered security awareness training is increasingly seen as essential, empowering employees to recognize and resist sophisticated social engineering attacks. Over 70,000 organizations are already leveraging such platforms to strengthen their human firewall. As generative AI adoption accelerates, organizations must remain vigilant against both direct deepfake attacks and indirect threats to AI application infrastructure. The evolving threat landscape demands continuous adaptation of security strategies to address the growing use of AI in cybercrime. Proactive threat intelligence and employee education are critical components in mitigating these risks. Organizations are urged to avoid isolated investments and instead implement comprehensive controls tailored to each new category of AI-driven threat. The convergence of deepfake technology, AI-powered phishing, and prompt-based attacks marks a significant escalation in the sophistication and scale of cyber threats facing enterprises today.
Jun 29, 2026
Multiple sources highlighted how **AI is reshaping security work and risk**. One article promoted AI-assisted bug hunting and reconnaissance, arguing that AI can reduce triage noise and help prioritize likely attack paths across modern, complex attack surfaces (APIs, microservices, cloud, and third-party dependencies). A separate Talos newsletter echoed the theme at a higher level, describing AI adoption as a paradigm shift while emphasizing that outcomes still depend on skilled practitioners using these tools responsibly and learning through experimentation. Other items were not about AI security tooling so much as **trust, governance, and abuse**. A Vulnu newsletter reported the U.S. Pentagon taking early steps consistent with potentially treating **Anthropic/Claude** as a supply-chain risk—asking major defense contractors to assess reliance on Claude—amid tensions over Anthropic’s refusal to relax safeguards. Separately, a Smashing Security podcast recap described allegations that the operator of the **Archive.today/Archive.is** archiving service weaponized a CAPTCHA page to conduct a **DDoS** against a Finnish blogger and manipulated archive content to smear the blogger, prompting reactions including Wikipedia considering restrictions; the episode also mentioned a ransomware gang error that reportedly corrupted decryption keys, undermining victims’ ability to recover files.
Jun 29, 2026