Loading story…
The rapid integration of AI agents and humanoid robots into enterprise and industrial environments is introducing new cybersecurity challenges, as organizations struggle to adapt identity and access management (IAM) frameworks to accommodate these autonomous, non-human entities. Security experts warn that AI agents, due to their autonomy and unpredictable actions, require unique governance, authentication, and authorization controls, with recommendations to minimize their agency and continuously monitor their activities. Similarly, the proliferation of humanoid robots is drawing attention from both nation-state actors and cybercriminals, with recent espionage campaigns targeting robotics organizations and concerns about the ease of compromising these systems for disruptive or malicious purposes.
In parallel, the rise of synthetic media, particularly deepfakes, is prompting the cybersecurity insurance industry to expand coverage to include incidents involving AI-generated impersonations and reputational harm. While deepfake-enabled attacks remain relatively rare compared to traditional phishing and credential theft, they are increasingly used in highly targeted scams against executives and organizations. The evolving threat landscape underscores the need for organizations to update their risk management strategies, invest in robust IAM architectures, and prepare for a future where AI-driven threats and vulnerabilities are a central concern for both operational security and reputational defense.
Track how attackers are adapting to this technology.
2 events from the most recent confirmed update back to the earliest known activity.
Researchers and analysts reported that humanoid robots and the broader robotics industry are already facing cyber risks, including espionage, malware activity, and demonstrated remote compromise of devices such as Unitree robots. They warned that immature security practices and insecure system foundations could create broader cyber-physical risks as adoption grows.
Cybersecurity insurance provider Coalition started offering coverage for deepfake-related incidents, including reputational harm and response services such as forensic analysis and legal support. The reference does not specify an earlier launch date, so the event is dated from the article publication.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
3 references tracked. Mallory keeps watching after this page renders.
sentinelone.com
Open sourcedarkreading.com
Open sourcecyberscoop.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
A recent Gartner survey revealed that 62% of organizations have experienced deepfake attacks within the past year, highlighting the rapid adoption of AI-driven social engineering tactics. These attacks often involve the use of deepfake technology to impersonate executives, tricking employees into transferring funds or divulging sensitive information. Akif Khan of Gartner emphasized that social engineering remains a reliable attack vector, and the introduction of deepfakes makes it even more challenging for employees to detect fraudulent activity. Automated defenses alone are insufficient, as employees are now the frontline defense against these sophisticated impersonation attempts. The survey also found that 32% of organizations faced attacks targeting AI applications, particularly through prompt injection and manipulation of large language models (LLMs). Such adversarial prompting can cause AI chatbots and assistants to generate biased or malicious outputs, further expanding the threat landscape. Flashpoint analysts corroborate these findings, reporting that threat actors are actively discussing and deploying AI-powered tools in underground communities. These include specialized malicious AI models and AI-generated attack plans, which are being used to automate and scale cybercriminal operations. The most immediate threat identified is the use of AI to exploit human psychology, with attackers leveraging AI to create convincing phishing lures and fabricated realities that undermine traditional authentication methods based on voice and visual cues. Financial institutions are particularly vulnerable, as demonstrated by recent incidents where finance workers were deceived by AI-generated content. The rise of 'Dark GPTs' and Attack-as-a-Service (AaaS) offerings on the dark web further illustrates the commercialization and accessibility of AI-driven cybercrime. Security experts recommend a defense-in-depth approach, combining robust technical controls with targeted measures for emerging AI risks. AI-powered security awareness training is increasingly seen as essential, empowering employees to recognize and resist sophisticated social engineering attacks. Over 70,000 organizations are already leveraging such platforms to strengthen their human firewall. As generative AI adoption accelerates, organizations must remain vigilant against both direct deepfake attacks and indirect threats to AI application infrastructure. The evolving threat landscape demands continuous adaptation of security strategies to address the growing use of AI in cybercrime. Proactive threat intelligence and employee education are critical components in mitigating these risks. Organizations are urged to avoid isolated investments and instead implement comprehensive controls tailored to each new category of AI-driven threat. The convergence of deepfake technology, AI-powered phishing, and prompt-based attacks marks a significant escalation in the sophistication and scale of cyber threats facing enterprises today.
Jun 29, 2026
AI technologies are rapidly transforming the landscape of cybercrime, enabling scammers to create highly convincing deepfakes and personalized attacks that are increasingly difficult for individuals and organizations to detect. Recent research and industry reports highlight a surge in AI-powered scams, with over 70% of consumers encountering scams in the past year and deepfake audio and video emerging as top concerns. Attackers are leveraging social media as a primary channel to target victims, exploiting the widespread use of mobile devices, which often lack adequate security protections. The sophistication of these attacks is exemplified by incidents such as the $25 million fraud at Arup, where a deepfaked videoconference deceived an employee into transferring company funds. The growing threat of deepfakes and synthetic media is driving a cybersecurity arms race, as organizations struggle to keep pace with evolving attack techniques. Security leaders are increasingly focused on strengthening identity controls, as insurers now scrutinize the maturity and enforcement of identity and access management practices before offering coverage. Research also reveals that current identity document verification systems are hampered by limited and non-diverse training data, making them vulnerable to advanced fraud tactics. As AI continues to lower the barrier for attackers, both technical and human-centric defenses must adapt to counter the risks posed by synthetic identities and technology-enhanced social engineering.
Jun 29, 2026
Organizations are facing a surge in AI-driven threats, including the use of deepfakes and malicious AI-branded mobile applications, which are being leveraged by attackers to bypass traditional security controls and exploit brand trust. Deepfake technology is now operationally used for fraud, with attackers employing generative AI to create convincing synthetic identities that can deceive employees and systems, resulting in significant financial losses. Detection tools often lag behind, as they are unable to keep pace with new, sophisticated fakes, and human detection rates remain low, leaving enterprises vulnerable to rapidly evolving AI-enabled social engineering attacks. Simultaneously, the proliferation of AI-branded mobile apps has created new attack vectors, with cloned or maliciously modified applications harvesting data, delivering adware, or embedding spyware on endpoints. Compounding these risks, many organizations are struggling with the rise of "shadow AI," where employees circumvent security controls to use unauthorized AI tools, undermining visibility and increasing exposure to unmonitored threats. Security leaders are urged to move beyond simple detection and blocking strategies, adopting adaptive, real-time verification and comprehensive risk management approaches to address the multifaceted challenges posed by AI in the enterprise.
Jul 12, 2026