Loading story…
FanDuel has restructured its security operations by replacing the traditional tiered analyst model with an all-engineer team focused on building and maintaining custom AI agents. These agents, such as SAGE, autonomously handle tasks like phishing detection, account takeover response, and incident response workflows, resulting in significant efficiency gains and a reduction in incomplete post-incident actions. The approach emphasizes starting with high-volume, specific use cases and gradually expanding automation, while also addressing new challenges like context rot in large language models.
Across the industry, the rapid adoption of artificial intelligence is driving a major shift in cloud security strategies. Traditional compliance-focused tools are being replaced by dynamic, behavior-based defense systems that leverage AI to monitor runtime context, such as live system calls and API requests, rather than relying on static configuration snapshots. This evolution enables defenders to detect subtle, real-time anomalies and better counter AI-powered attacks, as seen in increased investment and innovation in cloud and AI runtime visibility solutions.
Track how attackers are adapting to this technology.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Cybercriminals are increasingly leveraging automation and generative AI to amplify traditional fraud and attack techniques, enabling them to scale operations and evade detection with unprecedented speed. Phishing, credential theft, and document forgery are being supercharged by machine-driven campaigns, while organizations struggle to keep pace as bots and AI-powered tools probe for vulnerabilities across digital ecosystems. The rise of AI has also lowered the barrier to entry for attackers, allowing even those with limited technical skills to orchestrate sophisticated attacks, including large-scale DDoS campaigns and polymorphic malware that can evade signature-based defenses. Security leaders are responding by rethinking their strategies for 2026, focusing on adaptive, real-time defenses that integrate behavioral, document, and biometric signals. The convergence of cloud security and SOC operations is accelerating as cloud-native alerts become a primary driver of incident response, and the economic pressures of SaaS adoption and third-party risk reshape security priorities. While some vendor claims about AI-driven malware are exaggerated, there is consensus that AI is fundamentally changing both the threat landscape and the tools available to defenders, requiring a shift from static rules to dynamic, orchestrated security measures.
Jun 29, 2026
Artificial intelligence is rapidly transforming both the threat landscape and defensive strategies in cybersecurity, prompting CISOs and security leaders to rethink their approaches. A global study by Gigamon found that 86% of CISOs now view metadata and packet-level data as essential for detecting threats in complex hybrid cloud environments, but 97% admit to making trade-offs that leave visibility gaps. The rise of AI-driven attacks is fueling demand for real-time visibility and observability tools, with 75% of CISOs regarding public cloud as their highest security risk and 73% considering moving workloads back to private clouds. Security teams are investing heavily in AI-specific security tools, with 73% of companies spending over $1 million annually, yet 70% cite the rapid pace of AI development as their top concern. Recent high-profile breaches, such as those at LexisNexis Risk Solutions and McLaren Health Care, illustrate the increasing scale and sophistication of attacks, often amplified by AI. AI is accelerating the reconnaissance phase of attacks, enabling adversaries to map environments and identify vulnerabilities with unprecedented speed and precision, though human direction remains necessary for effective exploitation. The proliferation of AI-generated code, including through practices like 'vibe coding,' introduces new risks as less experienced developers may overlook security fundamentals, leading to insecure applications. Agentic AI systems, which act autonomously or on behalf of users, present urgent challenges in authentication, authorization, and identity management, with experts calling for scalable frameworks and robust credentials to prevent security lapses. CISOs are urged to build security into the design phase of software development, leveraging platform-native controls and enforcing policies like Row Level Security to minimize risk. The integration of AI into security operations is seen as both an opportunity and a challenge, requiring adaptive access solutions, post-quantum cryptography, and continuous monitoring. As AI reshapes digital transformation, organizations must balance the benefits of rapid innovation with the imperative to secure their environments against increasingly sophisticated, AI-powered threats. The consensus among experts is that security must evolve in tandem with AI capabilities, emphasizing proactive risk management, cryptographic agility, and a culture of security awareness across all levels of the organization.
Jun 29, 2026
The rapid integration of artificial intelligence into both attack and defense strategies is reshaping the cybersecurity landscape. AI is now being leveraged by attackers to conduct sophisticated supply chain attacks, as evidenced by a 156% increase in malicious package uploads to open-source repositories and real-world incidents such as the 3CX breach and weaponization of platforms like Hugging Face and GitHub. Traditional security tools are struggling to keep pace, with detection times for breaches increasing and static analysis often failing against polymorphic, context-aware AI-generated malware. In response, organizations are adopting AI-aware security solutions to improve threat detection and response, while regulatory frameworks like the EU AI Act are imposing stricter compliance requirements and significant penalties for violations. On the defensive side, AI is being used to enhance cloud security by enabling real-time threat detection, risk anticipation, and automated response, which has contributed to a reduction in average breach costs. The fusion of DDI (DNS, DHCP, and IP address management) data with AI platforms is also transforming network security, allowing for predictive, autonomous defense mechanisms that close visibility gaps in complex, hybrid environments. These advancements are critical as enterprises face increasingly automated and adaptive threats that exploit the seams between network and security operations.
Jun 29, 2026