Loading story…
Organizations are rapidly increasing their adoption of artificial intelligence (AI) technologies, but security measures are failing to keep pace, resulting in a widening exposure gap. Surveys from Red Canary and Tenable highlight that while security budgets and tool sophistication have grown, incident response times are slowing, and the attack surface is expanding—particularly as AI becomes embedded in business operations. Key targets remain email, identity, and endpoints, with a significant portion of organizations experiencing incidents in these areas. Despite efforts to consolidate security tools, most teams report longer detection-to-resolution times, and the business impact includes substantial financial losses, data breaches, and service disruptions.
The rush to integrate AI has outstripped the ability to secure it, with most organizations adopting AI faster than they can implement effective protections. While many are aligning with frameworks like the EU AI Act and NIST AI RMF, few are translating these into practical controls such as data encryption, system testing, or robust identity management for AI systems. As AI pipelines and connections proliferate across productivity apps, browsers, and cloud services, new attack vectors emerge, leaving critical systems and data increasingly vulnerable. Proactive defense and continuous visibility are recommended to close the gap between AI innovation and enterprise security readiness.
Track how attackers are adapting to this technology.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
ISACA's 2026 State of Cyber report found that organizations are deploying AI security capabilities faster than they are preparing to handle AI-related incidents. **Seventy-one percent** have not conducted an AI incident-response exercise, and only **3%** have mature formal runbooks for AI-specific incidents. The report highlights risks including sensitive-data exposure, AI-enabled phishing and fraud, scaled social engineering, and employee or insider misuse of generative AI. European security teams are also facing a growing operational burden: **38%** of surveyed IT and cyber professionals said their organizations had already sustained more attacks this year than during all of 2025, while **54%** expect a material attack within the next 12 months. Social engineering remains the most common threat, with AI helping attackers automate and refine targeting; defenders are using AI for detection, response, endpoint protection, and task automation, but persistent understaffing, underfunding, skills gaps, and burnout are limiting resilience.
Sep 22, 2026
Organizations are rapidly integrating AI technologies into their operations, with studies showing a significant increase in AI adoption and the implementation of AI acceptable use policies. However, despite these advances, many companies struggle to effectively classify and protect data, and governance frameworks often lag behind the pace of AI deployment. Reports highlight that while 80% of organizations have established AI use policies, only a third feel confident in their data protection measures, and over half believe their data is not yet ready for AI. This gap between adoption and governance is further exacerbated by the acceleration of data growth driven by AI, with a notable rise in organizations managing petabyte-scale datasets. The lack of robust governance and holistic data management frameworks has led to increased risks, including the emergence of shadow identities and unmitigated security threats associated with AI tools. Experts emphasize the need for organizations to move beyond initial policy creation and embed comprehensive AI governance and dynamic data protection into their core operations. Without these measures, the benefits of AI could be undermined by vulnerabilities and operational blind spots, making it critical for security teams to proactively address these challenges as AI becomes ubiquitous in enterprise environments.
Jun 29, 2026
Enterprises’ rapid deployment of **AI and agentic AI** is increasingly creating measurable security and business risk, including direct exposure of sensitive personal data and downstream impacts on risk transfer. A widely cited example involved McDonald’s *McHire* applicant-screening platform (built by *Paradox.ai*), where researchers reported a trivial backend credential weakness (`123456` as both username and password) and no MFA, potentially exposing data tied to roughly **64 million** applicants; the incident is being used by insurers and risk teams as evidence that AI adoption is moving faster than security and governance, contributing to tighter cyber-insurance language, higher premiums, and **AI-related exclusions**. Separate reporting also highlighted that “plug-and-play” AI is unrealistic at enterprise scale, with organizations increasingly needing custom integration and operational ownership rather than relying on off-the-shelf tools. Threat reporting during the same period reinforced that AI is expanding both attacker capability and the attack surface: researchers described **Pakistan-linked APT36** using AI coding tools to generate high volumes of low-quality malware variants (including in less common languages) and to leverage legitimate cloud services for command-and-control, complicating detection. Additional research flagged **AI-themed browser extensions** (Chrome/Edge) that impersonate legitimate tools and can harvest LLM chat histories and browsing activity, underscoring the risk of “shadow AI” and unvetted add-ons. In parallel, routine threat-intelligence summaries continued to track major incidents (e.g., ransomware and data breaches) alongside AI-enabled tactics, indicating that AI risk is becoming intertwined with broader enterprise security exposure rather than remaining a standalone technology concern.
Jun 29, 2026