Loading story…
Business leaders are increasingly prioritizing cyber-enabled fraud over ransomware as their top cybersecurity concern, according to the World Economic Forum (WEF) Global Cybersecurity Outlook 2026 released ahead of the Davos annual meeting. Reported high-frequency fraud vectors include phishing (including SMS smishing and voice vishing), followed by invoice/payment fraud, identity theft, and insider-driven abuse. The report frames cyber risk as a strategic and societal issue requiring coordinated action and leadership beyond purely technical controls.
WEF also warns that AI is accelerating cybersecurity risk, with surveyed respondents reporting mounting AI-related vulnerabilities and expecting AI to significantly reshape the security landscape in the near term. Separate content from CSO Online focused on application security tooling and industry features/podcasts does not provide substantive details tied to the WEF report and appears to be navigational/aggregated content rather than reporting on the same specific outlook findings.
Track how attackers are adapting to this technology.
3 events from the most recent confirmed update back to the earliest known activity.
According to coverage of the WEF report, business leaders identified cyber-enabled fraud as their top cybersecurity concern for 2026, overtaking ransomware. Phishing, including SMS- and voice-based variants, was cited as the most prevalent form of cyber fraud.
Reporting on the WEF outlook said AI-related vulnerabilities became the fastest-growing cyber risk during 2025, surpassing ransomware, supply-chain attacks, insider threats, and DDoS. The report also noted widespread AI adoption in security alongside lagging governance and validation processes.
The World Economic Forum released findings from its Global Cybersecurity Outlook 2026, describing cyber risk as a strategic, economic, and societal issue and calling for coordinated action to improve resilience.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Follow how adversaries are adapting to this technology, and where it touches your stack today.
3 references tracked. Mallory keeps watching after this page renders.
fortra.com
Open sourcescworld.com
Open sourcecsoonline.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Threat researchers and industry reports say cybercriminals are increasingly using **AI-powered tooling** to improve phishing, social engineering, credential theft, malware development, and activity inside compromised networks. Sophos found growing discussion across underground forums and marketplaces about large language models being used for multilingual lures, deepfake-enabled fraud, and other attack workflows, while ReliaQuest reported that AI has made attacks cheaper, faster to scale, easier to customize, and harder to detect without fundamentally changing core intrusion tradecraft. Proofpoint’s 2026 ransomware survey found **65%** of victim organizations believed AI increased attack effectiveness, with human interaction frequently enabling initial access through malicious links, attachments, and credential harvesting. Researchers said AI is now being applied to industrial-scale phishing, identity fabrication, phishing pages, web shells, credential harvesters, code padding to evade static analysis, and fake AI-branded downloads, while some criminals also worry automation could displace manual operators or degrade criminal product quality. Defenders were urged to reinforce core controls including **MFA**, passkeys, patching, behavioral detection, environment visibility, and defense-in-depth as AI-assisted attacks become more convincing and covert.
Aug 11, 2026
Threat intelligence reporting warns that **generative AI is accelerating the industrialization of cybercrime**, lowering cost and skill barriers while increasing speed and scale. Group-IB described a “fifth wave” in which criminals weaponize AI to produce *synthetic identity kits*—including deepfake video actors and cloned voices—for as little as **$5**, enabling fraud and bypass of authentication controls. The report also cited a sharp rise in dark web discussion of AI-enabled criminal tooling (from under ~50,000 messages annually pre-2022 to ~300,000 per year since 2023) and highlighted the shift toward “agentic” phishing kits that automate targeting, lure creation, and campaign adaptation via low-cost subscriptions. Industry commentary and forward-looking security coverage similarly anticipate **AI-enabled social engineering** becoming a dominant enterprise risk, with deepfakes eroding trust in audio/video channels and enabling more convincing phishing at scale across languages and cultures. Separately, business-leadership coverage frames cybersecurity and AI as intertwined with geopolitical risk and board-level decision-making, but provides limited incident- or threat-specific detail. An opinion piece argues AI will reshape the security vendor landscape and drive consolidation, but it is not focused on a specific threat campaign or disclosure.
Jul 12, 2026
Multiple industry reports and expert commentary indicate a sharp rise in **AI-enabled fraud** and cybercrime techniques, including voice and virtual meeting scams and deepfake-driven social engineering. A Pindrop report cited a **1,210% increase** in AI-enabled voice and virtual meeting fraud over the prior year, with attackers using **interactive voice response (IVR)** systems for reconnaissance and then leveraging that intelligence for **account hijacking**; healthcare and retail were reported as the most impacted sectors, alongside growing **AI-assisted return fraud** that targets low-dollar refunds at scale. Separately, Malwarebytes reported that AI use in cybercrime accelerated in 2025, but that **hands-on-keyboard intrusions** still dominated, while ransomware activity rose **8% year-over-year** to record highs and **86%** of intrusions involved **remote encryption**, often originating from a single unprotected system. In financial services, experts warned that **agentic AI** capable of autonomously initiating transactions is creating a “**dual authentication crisis**,” requiring institutions to validate both **intent** (whether a user authorized an agent’s actions) and **integrity** (whether the agent is operating as designed), shifting authentication from identity-only checks (e.g., passwords/MFA) toward verifying delegated authority and agent behavior.
Jun 29, 2026