Loading story…
Security leaders are increasingly leveraging AI to enhance operational efficiency and address the challenges of scaling security teams. At Trustpilot, the security operations team has adopted AI agents for automated alert triage, enrichment, and decision routing, allowing a small team to manage a high volume of alerts and focus on strategic initiatives. The approach includes rigorous prompt testing and treating AI agents as 'interns' to ensure safety and reliability, highlighting the importance of cultural adaptation and robust guardrails when integrating AI into security workflows.
Simultaneously, the evolution of application security is being shaped by the limitations of static, rules-based controls, especially as AI coding assistants accelerate development and expand risk. Traditional static analysis and firewall rules are proving inadequate for dynamic attack surfaces, prompting calls for more adaptive, context-aware security measures. The reliance on developer-defined guidelines for AI assistants, while intended to improve code quality and enforce standards, risks repeating past mistakes by failing to address the complexity and fluidity of modern threats.
Track how attackers are adapting to this technology.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
2 references tracked. Mallory keeps watching after this page renders.
detectionatscale.com
Open sourceapiiro.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Security leaders and practitioners are increasingly focused on the integration of artificial intelligence (AI) into cybersecurity operations, particularly in areas such as firmware analysis and infrastructure protection. Recent discussions highlight the transition from traditional security methods to AI-driven approaches, emphasizing both the benefits and the new risks introduced by these technologies. Experts point out the importance of prompt specificity for effective vulnerability discovery, the need for robust guardrails when deploying AI, and the potential for AI-generated reports to impact cybersecurity workflows. The creative monetization of vulnerabilities, especially in IoT devices, and the use of man-in-the-middle techniques are also emerging concerns as AI becomes more deeply embedded in security processes. Security leaders at high-growth AI infrastructure companies are adopting threat-model-driven frameworks and prioritizing detection observability over prevention controls in fast-moving environments. The rise of AI agents is fundamentally altering the security landscape, making previously manageable security gaps potentially catastrophic. Building security programs from the ground up now requires a focus on host integrity from firmware through userspace, and a mandate for "AI-first" detection platforms. These developments underscore the need for concrete threat models, careful prioritization of security investments, and a shift in how organizations approach security debt in the age of AI.
Jun 29, 2026
Security researchers and industry experts are raising alarms about the growing use of artificial intelligence (AI) in both offensive and defensive cybersecurity operations. Attackers are leveraging AI to bypass advanced security controls, as demonstrated by a researcher who used AI to defeat an "AI-powered" web application firewall, and by the emergence of new malware that exploits AI model files and browser vulnerabilities to evade detection and exfiltrate credentials. Meanwhile, defenders are grappling with the proliferation of unsanctioned AI tools in the workplace, the challenge of auditing AI decision-making, and the surge in AI-powered bug hunting, which has led to a dramatic increase in vulnerability discoveries and bug bounty payouts. The risks are compounded by the lack of clear AI usage policies, the potential for data leaks through generative AI tools, and the difficulty in monitoring or controlling how sensitive information is processed and stored by these systems. Industry reports highlight that a significant portion of employees use unauthorized AI applications, often exposing sensitive data without IT oversight, and that prompt injection and model manipulation are now common vulnerability types. The security community is also debating the extent to which ransomware and other attacks are truly "AI-driven," with some reports criticized for overstating the role of AI in current threat activity. As organizations rush to adopt AI for efficiency and innovation, experts urge the implementation of robust governance, continuous monitoring, and red-teaming to anticipate and mitigate the evolving risks posed by both sanctioned and shadow AI systems. The rapid evolution of AI in cybersecurity is forcing a reevaluation of traditional defense models, emphasizing the need for transparency, operational oversight, and adaptive security strategies.
Jun 29, 2026
Security leaders are warning that **AI-accelerated software delivery and agentic AI** are outpacing traditional application security and governance models, creating visibility and control gaps as code and infrastructure change faster than teams can inventory, review, and remediate. An OWASP Israel panel highlighted that AI agents can expand attack surface without clear ownership or asset inventory, making legacy “block the release on critical vulns” KPIs increasingly impractical and forcing CISOs to rethink how risk is prioritized and governed at high velocity. Industry commentary and reporting echoed the same pressure on security leadership: CISOs are described as increasingly **stretched thin**, with calls to re-envision enterprise risk management to cope with accelerating change and expanding responsibilities. Broader AI-security discourse also points to emerging needs for **identity and authorization frameworks for AI agents**, and to the growing reality of AI systems finding large numbers of vulnerabilities in open-source components—raising the stakes for supply chain security, secure engineering enablement, and more disciplined operating models for security teams rather than relying on traditional gatekeeping alone.
Jun 30, 2026