Loading story…
Artificial intelligence is fundamentally altering the landscape of trust and risk management in cybersecurity, particularly in the areas of identity verification and cyber insurance. Traditional Know Your Customer (KYC) processes are increasingly unreliable due to the rise of synthetic identity fraud, prompting a shift toward continuous, behavior-based trust models rather than one-time identity checks. This evolution is forcing organizations to rethink how they establish and maintain digital trust, as AI-generated identities can bypass legacy verification systems.
Cyber insurers are also facing new challenges as AI introduces systemic, difficult-to-quantify risks that complicate coverage models and require organizations to demonstrate robust resilience and governance. Additionally, the emergence of AI agents as autonomous decision-makers in e-commerce is disrupting established advertising-driven business models and raising fresh concerns about accountability and governance in online transactions.
Track how attackers are adapting to this technology.
2 events from the most recent confirmed update back to the earliest known activity.
Insurance Services Office general liability exclusions for AI-related risks took effect in January 2026, marking a concrete shift in commercial insurance policy language. Insurers and brokers also began introducing exclusions and affirmative endorsements while increasing underwriting scrutiny of customers' AI use.
An ISMG editors' panel said traditional know your customer processes are becoming less reliable because of synthetic identity fraud, arguing for a shift toward continuous, behavior-based trust models. The discussion also highlighted AI's broader effects on cyber insurance, governance, and online commerce.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
6 references tracked. Mallory keeps watching after this page renders.
govinfosecurity.com
Open sourcebankinfosecurity.com
Open sourcecio.com
Open sourcebusinessinsurance.com
Open sourcebankinfosecurity.com
Open sourcegovinfosecurity.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
AI technologies are rapidly transforming the landscape of cybercrime, enabling scammers to create highly convincing deepfakes and personalized attacks that are increasingly difficult for individuals and organizations to detect. Recent research and industry reports highlight a surge in AI-powered scams, with over 70% of consumers encountering scams in the past year and deepfake audio and video emerging as top concerns. Attackers are leveraging social media as a primary channel to target victims, exploiting the widespread use of mobile devices, which often lack adequate security protections. The sophistication of these attacks is exemplified by incidents such as the $25 million fraud at Arup, where a deepfaked videoconference deceived an employee into transferring company funds. The growing threat of deepfakes and synthetic media is driving a cybersecurity arms race, as organizations struggle to keep pace with evolving attack techniques. Security leaders are increasingly focused on strengthening identity controls, as insurers now scrutinize the maturity and enforcement of identity and access management practices before offering coverage. Research also reveals that current identity document verification systems are hampered by limited and non-diverse training data, making them vulnerable to advanced fraud tactics. As AI continues to lower the barrier for attackers, both technical and human-centric defenses must adapt to counter the risks posed by synthetic identities and technology-enhanced social engineering.
Jun 29, 2026
Artificial intelligence is fundamentally reshaping the cybersecurity landscape, introducing both new opportunities and significant risks for organizations and professionals. The adoption of AI tools is accelerating the learning curve for cybersecurity practitioners, enabling faster skill acquisition, automated reconnaissance, and streamlined exploit generation, as highlighted by experts who advocate for integrating AI into bug hunting and security research workflows. However, this technological leap is also disrupting traditional career paths, with studies showing a marked decline in entry-level cybersecurity and IT jobs as AI automates routine tasks such as help desk support, manual testing, and security monitoring. Industry leaders emphasize the need for IT teams to adapt by acquiring new skillsets and focusing on strategic problem-solving, as the majority of job skills are expected to change dramatically by 2030 due to AI's influence. Concurrently, the rise of autonomous AI agents introduces a new class of security risks, as these systems possess the ability to make independent decisions, access sensitive data, and execute code across networks, often in ways that are opaque and difficult to audit. The lack of robust identity management and oversight for these agentic systems leaves organizations vulnerable to novel attack vectors, including black box attacks where the root cause of malicious or erroneous actions is nearly impossible to trace. Deepfake technology, powered by generative AI, is rapidly becoming a favored tool for social engineering attacks, with a significant increase in organizations reporting incidents involving AI-generated impersonations of executives and employees. This trend is eroding traditional trust mechanisms, such as voice and video verification, and forcing security teams to rethink their authentication strategies. Ethical concerns are also at the forefront, as CISOs and boards are urged to monitor for red flags such as loss of human agency, lack of technical robustness, and data privacy risks associated with AI deployments. Regulatory frameworks and responsible AI governance are becoming essential to ensure that AI systems are deployed safely and ethically, particularly in sectors like financial services where the stakes are high. The convergence of these factors is creating a dynamic environment where cybersecurity professionals must continuously adapt to the evolving threat landscape, leveraging AI for defense while remaining vigilant against its misuse. As organizations rush to deploy AI-driven solutions, the need for comprehensive security strategies, ongoing workforce development, and ethical oversight has never been more critical. The future of cybersecurity will be defined by the ability to harness AI's power responsibly while mitigating its inherent risks, ensuring both operational resilience and trust in digital systems.
Jun 29, 2026
CISOs are fundamentally rethinking their security organizations as artificial intelligence becomes deeply integrated into business strategies and cybersecurity operations. According to a Deloitte survey, 43% of US cyber decision-makers are already leveraging AI extensively within their cybersecurity programs, which is gradually increasing the influence of CISOs in strategic technology investment discussions. While AI has not yet revolutionized security organizations, it is steadily reshaping operational models, with speed and adaptability becoming critical factors for both defense and attack. Security leaders emphasize that AI accelerates all aspects of cybersecurity, magnifying the impact of both strong and weak security fundamentals, such as provisioning, permissions, and network segmentation. Organizations with mature security postures are realizing efficiencies by layering AI-driven tools into their workflows, while those lacking foundational controls face amplified risks. At industry events like Oktane 2025, experts highlighted that identity has become the new frontline in protecting AI-driven enterprises, as the proliferation of SaaS and AI agents leads to a surge in both human and non-human identities. This identity explosion introduces new risks, including misconfigured access, orphaned accounts, and sophisticated identity-based attacks. Security teams are adopting open standards such as IPSIE, MCP, and A2A to build secure, interoperable AI ecosystems and maintain centralized control over AI-driven interactions. Companies like Adyen have demonstrated success in unifying identity management across global operations, improving both security and user experience. Embedding AI into workflows, as seen at Box, enhances data protection even in highly regulated industries. Security practitioners are also focusing on behavioral monitoring, automation, and fostering a security-first culture to counter attackers who increasingly exploit identity systems rather than traditional hacking methods. The rise of AI-driven social engineering, including deepfakes and multi-channel phishing, is prompting organizations to implement phishing-resistant multi-factor authentication, zero-trust architectures, and comprehensive employee training. The convergence of AI and identity management is shaping the future of enterprise security, requiring a blend of advanced technology, disciplined fundamentals, and adaptive strategies to address evolving threats.
Jul 12, 2026