Loading story…
Organizations are facing heightened cybersecurity risks as employees increasingly use generative AI tools without IT oversight, a phenomenon known as shadow AI. This trend, highlighted by industry experts, exposes companies to data privacy, compliance, and security threats, with a significant portion of employees using unapproved AI applications on personal and work devices. CIOs are advised to implement clear policies categorizing AI tools as approved, restricted, or forbidden, and to provide secure environments for experimentation to balance innovation with data protection. In parallel, the healthcare sector is experiencing a surge in cyberattacks due to its rapid digital transformation, adoption of AI-powered diagnostics, and proliferation of Internet of Medical Things (IoMT) devices, making it a prime target for cybercriminals seeking valuable patient data.
The expansion of connected devices and AI-driven systems has also led to a rise in sophisticated malware campaigns targeting IoT environments. Notably, Mirai-based botnets such as ShadowV2 and RondoDox have exploited multiple vulnerabilities in IoT devices to build large-scale botnets for DDoS attacks. These developments underscore the urgent need for organizations across industries to strengthen their cybersecurity posture, particularly as attackers adapt to exploit the growing attack surface created by AI and IoT technologies. Security teams are urged to proactively manage shadow AI, secure IoT deployments, and prepare for increasingly complex threats leveraging both AI and IoT vectors.
Track how attackers are adapting to this technology.
10 events from the most recent confirmed update back to the earliest known activity.
The U.S. Federal Communications Commission reversed telecom cybersecurity rules, marking a notable policy shift affecting the sector's regulatory environment. The change was cited as one of the week's major cybersecurity governance developments.
Microsoft and Kaspersky reported record-breaking levels of phishing and credential theft activity. Their findings indicated a significant escalation in the scale and effectiveness of social-engineering-driven attacks.
Russia-linked APT Water Gamayun was reported exploiting a newly identified MSC-related flaw to carry out stealthy infections. The disclosure added attribution and technical detail to an active espionage-related threat.
Security reporting highlighted the discovery of several advanced malware threats, including QuietEnvelope, Xillen Stealer, and new Android-focused malware. The findings added fresh technical detail on evolving criminal tooling and mobile threats.
Researchers reported a rise in phishing activity timed to the 2025 shopping season. The campaigns took advantage of seasonal consumer behavior to increase credential theft and fraud opportunities.
An upcoming encryption upgrade for Tor was disclosed as a notable technical development. The change was presented as an important improvement to the privacy network's security architecture.
Thailand banned the collection of iris biometric data by Worldcoin. The action represented a regulatory response to privacy and biometric data protection concerns.
UK authorities revealed a billion-dollar cryptocurrency laundering network allegedly linked to evasion of sanctions on Russia. The disclosure marked a significant law-enforcement and sanctions-related cybercrime development.
Singapore introduced a requirement for messaging applications to implement anti-spoofing measures. The move was part of a broader government response to fraud and impersonation risks in digital communications.
A resurgence of Mirai-derived botnets, including ShadowV2 and RondoDox, was reported targeting IoT devices worldwide by exploiting multiple vulnerabilities. The activity highlighted renewed large-scale abuse of exposed and weakly secured internet-connected devices.
Vulnerabilities, threat actors, malware, products, organizations, breaches, and observables Mallory has linked to this story. Indicator values are masked here and available in full in the app.
Indicator values are masked on this page. See the values in Mallory Domains, IPs, hashes, and URLs are exportable to your SIEM.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
3 references tracked. Mallory keeps watching after this page renders.
cio.com
Open sourcesecuritysenses.com
Open sourcethehackernews.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Organizations are facing a rapidly evolving threat landscape as artificial intelligence accelerates the capabilities of cyber attackers, particularly against critical infrastructure and enterprise environments. Security experts highlight the increasing use of AI by adversaries to identify vulnerabilities in software and APIs, requiring defenders to adopt smarter, adaptive security measures. Industry reports emphasize the importance of patching, real-time anomaly detection, and the deployment of AI security platforms to protect both third-party and custom-built AI applications. Gartner predicts that by 2028, over half of enterprises will use AI security platforms, and preemptive cybersecurity solutions will become a dominant part of security spending as organizations shift from reactive to proactive defense. Geopolitical instability and complex digital supply chains are further amplifying cyber risks, with many organizations underprepared for cascading impacts such as state-sponsored attacks and supply chain vulnerabilities. While risk management strategies are improving, visibility beyond direct partners remains limited, leaving blind spots that attackers can exploit. The convergence of AI-driven threats, geopolitical volatility, and the need for advanced security technologies underscores the urgency for organizations to modernize their cybersecurity approaches to safeguard critical assets and maintain digital trust.
Jun 29, 2026
Enterprises are rapidly integrating artificial intelligence (AI) into their core operations, leading to a significant increase in both the scale and complexity of cybersecurity risks. Autonomous AI agents, once limited to providing suggestions, now act independently within enterprise systems, accessing sensitive data, executing transactions, and triggering downstream workflows without human oversight. These agents, often deployed by individual teams or embedded in third-party software, can inadvertently ingest confidential information, such as customer credit card data, even if the data is only briefly accessible. Unlike human users, AI agents lack contextual understanding and ethical judgment, acting continuously and at scale, which introduces a new category of 'Shadow AI' risk. Multimodal AI systems, which process multiple input streams to generate more human-like outputs, further expand the attack surface. Adversaries can exploit these systems by manipulating data inputs, such as subtly altering images or text, to deceive the AI and bypass security controls. Research has demonstrated that these attacks are not merely theoretical; adversarial manipulations can evade detection and cause significant harm, especially in critical sectors like defense, healthcare, and finance. Organizations are increasingly aware of the dangers posed by AI-augmented threats, including deepfakes and AI-driven social engineering, but many lag in implementing effective technical defenses. Surveys indicate that while a majority of firms have experienced deepfake or AI-voice fraud attempts, more than half have suffered financial losses as a result. Despite this, investment in detection and mitigation technologies remains inadequate, and many companies overestimate their preparedness. The surge in AI adoption is reflected in corporate disclosures, with over 70% of S&P 500 firms now reporting AI as a material risk, up from just 12% two years prior. Reputational and cybersecurity risks are the most frequently cited concerns, followed by legal and regulatory challenges as governments move to establish AI-specific compliance requirements. However, only a minority of corporate boards have formally integrated AI oversight into their governance structures, highlighting a gap between risk awareness and actionable governance. The lack of comprehensive frameworks for managing AI risk leaves organizations vulnerable to both technical and compliance failures. As AI becomes more deeply embedded in business processes, the need for robust governance, continuous education, and responsible-use frameworks becomes increasingly urgent. Security and governance leaders must adapt to this new frontier by developing strategies that address the unique risks posed by autonomous and multimodal AI systems. Failure to do so could result in significant financial, operational, and reputational damage as adversaries continue to exploit the evolving AI landscape.
Jun 29, 2026
Security researchers and industry experts are raising alarms about the growing use of artificial intelligence (AI) in both offensive and defensive cybersecurity operations. Attackers are leveraging AI to bypass advanced security controls, as demonstrated by a researcher who used AI to defeat an "AI-powered" web application firewall, and by the emergence of new malware that exploits AI model files and browser vulnerabilities to evade detection and exfiltrate credentials. Meanwhile, defenders are grappling with the proliferation of unsanctioned AI tools in the workplace, the challenge of auditing AI decision-making, and the surge in AI-powered bug hunting, which has led to a dramatic increase in vulnerability discoveries and bug bounty payouts. The risks are compounded by the lack of clear AI usage policies, the potential for data leaks through generative AI tools, and the difficulty in monitoring or controlling how sensitive information is processed and stored by these systems. Industry reports highlight that a significant portion of employees use unauthorized AI applications, often exposing sensitive data without IT oversight, and that prompt injection and model manipulation are now common vulnerability types. The security community is also debating the extent to which ransomware and other attacks are truly "AI-driven," with some reports criticized for overstating the role of AI in current threat activity. As organizations rush to adopt AI for efficiency and innovation, experts urge the implementation of robust governance, continuous monitoring, and red-teaming to anticipate and mitigate the evolving risks posed by both sanctioned and shadow AI systems. The rapid evolution of AI in cybersecurity is forcing a reevaluation of traditional defense models, emphasizing the need for transparency, operational oversight, and adaptive security strategies.
Jun 29, 2026