Loading story…
Cybersecurity experts are emphasizing the growing importance of Zero Trust principles and robust identity security as attackers increasingly leverage AI-powered techniques, such as social engineering and deepfakes, to gain unauthorized access. Discussions highlight that attackers are now more likely to "log in" using stolen credentials rather than "break in" through technical exploits, making traditional perimeter defenses less effective. The rise of AI is also eroding critical thinking and increasing the risk of falling for sophisticated scams, underscoring the need for continuous verification, least-privilege access, and a culture of vigilance within organizations.
Zero Trust architecture, which operates on the principles of "never trust, always verify" and "assume breach," is now seen as more essential than ever in countering these evolving threats. Security leaders are urged to focus on identity security, minimize standing privileges, and address the risks posed by shadow AI and misinformation. The consensus is that while AI introduces new challenges, it also reinforces the necessity of foundational security practices to protect digital environments against increasingly advanced adversaries.
Track how attackers are adapting to this technology.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Cybercriminals are increasingly targeting identity credentials rather than exploiting software vulnerabilities, fueling a thriving underground market for stolen usernames, passwords, tokens, and access rights. This so-called 'identity economy' has become a central pillar of the cybercrime ecosystem, with credentials being traded much like commodities on illicit marketplaces. Financial services and healthcare organizations remain prime targets, but the threat is universal, as evidenced by a 2023 study indicating that 95% of enterprises experienced some form of identity fraud. The financial impact is significant, with banks losing an average of $310,000 per incident and high-profile breaches, such as the $1.5 billion theft from a cryptocurrency exchange by North Korean hackers, underscoring the scale of the problem. Attackers employ a mix of traditional and modern techniques, including phishing, man-in-the-middle attacks, session hijacking, and social engineering, with AI now making phishing attempts more convincing and attacks more efficient. The rise of AI has supercharged these traditional attacks, enabling threat actors to accelerate reconnaissance and discovery phases by up to tenfold. AI is also being weaponized in new ways, such as compromising organizations' own AI instances to exfiltrate sensitive data or subvert security defenses, a tactic likened to 'living-off-the-land' but with AI agents. The cybercrime-as-a-service model further lowers the barrier to entry, allowing even less sophisticated actors to launch credential stuffing, fraudulent registration, and synthetic identity attacks at scale. To counter these evolving threats, experts emphasize the need for robust identity controls, particularly for managing access by both human users and AI agents. Industry leaders advocate for open standards, such as the draft Cross App Access extension to OAuth, which aims to provide centralized, standardized authorization for AI-driven and app-to-app interactions. The IPSIE working group and protocols like MCP and A2A are also working to establish consistent identity security profiles and authentication frameworks to safely manage AI agents' access and communication. With quantum computing on the horizon, the long-term value of stolen credentials is expected to rise, as encrypted data from past breaches could eventually be decrypted, turning old compromises into renewed threats. Multi-factor authentication (MFA) remains a critical defense, but attackers are adapting with tactics like MFA fatigue, where users are bombarded with prompts until they approve access. Insiders continue to pose risks, and the combination of human error and advanced AI-driven attacks makes comprehensive identity security more urgent than ever. The consensus among security professionals is that industry alignment on open standards and the implementation of strict access controls are essential to securing the future of digital identity in an AI-driven threat landscape.
Jun 29, 2026
Recent analyses highlight that the most significant cybersecurity losses in 2025 stemmed from identity and OAuth token abuse, rather than high-profile zero-day vulnerabilities. Attackers leveraged AI to scale social engineering, phishing, and OAuth consent abuse, leading to widespread incidents across logistics, manufacturing, and other sectors. The rapid adoption of AI in enterprise environments has expanded the attack surface, with 99% of surveyed organizations experiencing at least one attack on their AI systems in the past year. The proliferation of GenAI-assisted coding has further outpaced security teams’ ability to secure production environments, compounding risk. Security leaders are increasingly concerned about the misalignment between teams, tools, and workflows, which exacerbates the impact of these AI-driven threats. Effective management of non-human identities (NHIs), such as machine credentials and tokens, is now critical, especially in cloud and SaaS environments. The need for robust governance, visibility, and context-aware controls is underscored by the growing sophistication of attacks targeting both human and machine identities. Organizations are urged to prioritize identity and secrets management, as well as to adapt their security strategies to address the evolving risks introduced by AI and automation.
Jun 29, 2026
Cybercriminals are increasingly leveraging artificial intelligence to automate and enhance identity impersonation, making traditional security measures less effective. Attackers now use AI-generated voice messages and deepfakes to convincingly mimic executives and employees, enabling sophisticated business email compromise schemes and fraudulent financial transactions. The widespread availability of generative AI tools, combined with vast amounts of personal data from previous breaches, allows threat actors to craft highly personalized phishing messages and social engineering attacks that reference real company projects and colleagues, significantly lowering the barrier to entry for such operations. Security experts warn that AI-driven attacks are fundamentally changing the threat landscape, with phishing attempts becoming nearly impossible to detect and self-evolving malware presenting new challenges for defenders. The rise of digital doppelgangers and AI-powered adversaries underscores the urgent need for organizations to adopt zero-trust security models and advanced identity verification techniques, as conventional employee training and perimeter defenses are no longer sufficient to counter these evolving threats.
Jun 29, 2026