AI-Assisted Attacks

Why It Matters

AI lowers the cost and raises the speed of familiar attacks, which shortens the time defenders have to patch and respond.

Incidents and Analysis

• ThreatsDay: Critical Firewall Flaws, Banking Trojans Rented, Weaponized PDF, Token Theft + 26 More Stories 2026-10-30 · thehackernews.com
  Credential and token theft; AI-assisted attack
• CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEV 2026-10-30 · thehackernews.com
  Integer overflow or wraparound
• $6 Billion Binance Hack Bears Hallmarks of North Korea’s TraderTraitor 2026-10-30 · securityweek.com
  Compromised engineer laptop enabling unauthorized withdrawal transactions
• $2 Million+ Drained From Polymarket Traders in New Supply Chain Attack 2026-10-30 · securityweek.com
  Third-party software supply-chain compromise
• Google's Gemini 4 Carbon Leads Benchmarks for Finding, Exploiting, and Patching Vulnerabilities 2026-10-29 · thehackernews.com
  AI-assisted vulnerability discovery and exploitation
• Fake ChatGPT and Claude Apps Abuse Signed Executables to Deploy Crypto Miners 2026-10-29 · thehackernews.com
  Malware delivery through fake AI applications
• Linux Kernel TCP Flaw With 9.8 CVSS Score Affects Ubuntu, Red Hat and Other Distributions 2026-10-29 · thehackernews.com
  Remote unauthenticated root command execution
• How Secure Are US Elections? Voting Machine Risks and the Growing Threat of AI 2026-10-29 · securityweek.com
  AI-driven influence campaign
• Attackers Exploit PHP2Shell Flaws in Internet-Exposed Palo Alto Networks Management Interfaces 2026-10-29 · thehackernews.com
  Unauthenticated remote code execution
• China-Linked Hackers Exploited VMware ESX Zero-Day to Reduce Audit Trail Visibility 2026-10-29 · thehackernews.com
  Zero-day exploitation and audit-trail visibility reduction
• American Organizations Under Attack: Skyw4lker Device Code Phishing Campaign Exposed 2026-10-28 · thehackernews.com
  Device code phishing
• Wazuh and AI for Enhanced SOC Workflows 2026-10-28 · thehackernews.com
  AI-assisted attack
• Hackers Target Critical Oracle E-Business Suite RCE Flaw Days After Security Patch 2026-10-28 · thehackernews.com
  Improper authentication exploitation
• PHP2Shell Attack Roots 25 Servers, Breaches U.S. Government-Affiliated Network 2026-10-28 · thehackernews.com
  Exploitation of exposed PHP2Shell systems with kernel privilege escalation
• Volt Typhoon Used Covert Silent Train Network in Four Zero-Day Exploitation Campaigns 2026-10-28 · thehackernews.com
  Zero-day exploitation through a covert compromised-infrastructure network
• Anthropic's Unreleased AI Model Chains Flaws Into Working Chrome, Safari, Windows and Linux Exploits 2026-10-28 · thehackernews.com
  AI-assisted vulnerability exploitation and exploit chaining
• Fuzzers vs. AI: Comparing Fuzzilli and BigSleep on JavaScript Engines 2026-10-27 · googleprojectzero.blogspot.com
  AI-assisted vulnerability discovery
• AI-Generated Fake Login Pages Are Making Account Takeovers Easier 2026-10-27 · thehackernews.com
  AI-assisted phishing and session hijacking
• CyberStrikeAI Uses 44 AI Agents to Automate Hacking Operations Against Japan Targets 2026-10-27 · thehackernews.com
  AI-assisted automated hacking operations
• ⚡ Weekly Recap: This2Shell, That2Shell, Everything's an RCE? Rogue AI, Supply Chain Chaos and More 2026-10-26 · thehackernews.com
  Remote code execution and software supply-chain compromise
• Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware 2026-10-26 · thehackernews.com
  Social engineering and impersonation
• Anthropic Files for Potentially the Biggest IPO Ever as CEO Warns of Risk to Humanity From AI 2026-10-26 · securityweek.com
  Rogue AI agent activity
• Gheist Uses Stolen GitHub Tokens to Steal Private Repository Secrets via Actions Logs 2026-10-26 · thehackernews.com
  Stolen-token abuse through malicious CI/CD workflows
• Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions 2026-10-23 · thehackernews.com
  AI-assisted ransomware intrusion
• China APT Uses AI Pentest Tool Artex in ConnectWise Attacks 2026-10-23 · securityweek.com
  AI-automated reconnaissance, password spraying, and OAuth application abuse
• In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware 2026-10-23 · securityweek.com
  Rogue AI agent activity
• China-Linked Hackers Use ARTEX AI Agents in ConnectWise Supply Chain Attack 2026-10-22 · thehackernews.com
  AI-assisted supply chain attack
• ‘Skynet’ Agent Hijacks Exposed AI Models to Run Attacks 2026-10-21 · Security.com
  Autonomous AI agent abuse through exposed AI models
• Autonomous LLMjacking: ‘Skynet’ Agent Hijacks Exposed AI Models to Run Attacks 2026-10-21 · Security.com
  Autonomous LLMjacking
• The Harness Is the Hard Part of Agentic Pentesting 2026-10-21 · thehackernews.com
  AI-assisted penetration testing
• Generative AI Is Erasing Behavioral Tells, Weakening Behavior-Only Detection, Proofpoint Reports 2026-10-21 · thehackernews.com
  AI-generated personalized phishing
• China-Aligned Bronze Sandcastle Abuses Sandboxie DLL Sideloading to Deploy Backdoors 2026-10-21 · thehackernews.com
  DLL sideloading
• Google Chrome Adds ClickFix Warnings to Stop Users From Running Malicious Commands 2026-10-21 · thehackernews.com
  ClickFix social engineering
• High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7 2026-10-21 · securityweek.com
  Rapid exploitation of high-severity vulnerabilities and ransomware
• Google Hardens Chrome Against ClickFix Attacks, Insecure HTTP Connections 2026-10-21 · securityweek.com
  ClickFix social engineering
• Hackers Use Autonomous AI Agents to Breach Company Websites, Target Over 1,200 Sites 2026-10-20 · thehackernews.com
  Autonomous AI agent-assisted website attacks
• Critical FortiSIEM Flaw Gets Public Exploit PoC for Unauthenticated Remote Code Execution 2026-10-20 · thehackernews.com
  Unauthenticated path traversal enabling remote code execution
• AI Platform Cairn Abused to Hack Over 100 Organizations 2026-10-20 · securityweek.com
  AI platform abuse
• ClickFix Attackers Exploit Siemens Software Center Flaw to Deploy Remote Access Trojan 2026-10-20 · thehackernews.com
  DLL sideloading
• ⚡ Weekly Recap: 98 Zero-Days, Rogue AI Agents, $100M Crypto Theft, 700 Supermarkets Hit and More 2026-10-19 · thehackernews.com
  AI agent abuse
• MITRE ATT&CK v20 Catalogs AI Abuse, MFA Bypass, Water Utility Attacks 2026-10-19 · securityweek.com
  AI abuse, MFA bypass, and attacks against water utilities
• An AI Agent Found a Critical OTP Bypass in Production. The Attack Was the Easy Part. 2026-10-14 · thehackernews.com
  Authentication bypass by choosing the OTP delivery destination
• Researchers Used a Public OpenAI Model to Build a $250,000 Chrome Full-Chain Exploit in Six Days 2026-10-14 · thehackernews.com
  AI-assisted vulnerability discovery and exploit chaining
• How to Run a Deepfake Readiness Drill Before a Cloned Voice Calls Your Team 2026-10-14 · thehackernews.com
  Deepfake voice and video impersonation
• Anthropic Warns Small AI Models Could Soon Form Self-Propagating IoT Botnets 2026-10-13 · thehackernews.com
  Potential self-propagating AI on IoT devices
• Small AI Models Could Soon Self-Replicate on IoT Devices, Anthropic Warns 2026-10-13 · securityweek.com
  Potential self-replication of small AI models across IoT devices
• CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records 2026-10-12 · thehackernews.com
  AI-orchestrated initial access campaign
• In Other News: AI Used in Korean Bank Breaches, Poem-Guided Botnet, Empire Admin Gets 40 Years 2026-10-09 · securityweek.com
  Multiple, including AI-assisted bank breaches
• ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms 2026-10-08 · thehackernews.com
  Misuse of an AI pentesting tool for intrusion and data theft
• What Is Agentic Pentesting? What It Proves, and Where It Stops. 2026-10-07 · thehackernews.com
  Not applicable (buyer guidance on agentic pentesting)
• An LLM agent attempts to compromise a project on GitHub 2026-10-03 · LWN.net
  Autonomous coding agents submitting malicious pull requests and fake accounts
• AI Agents Aimed SQL Injection at US and Canadian Government Sites 2026-10-02 · securityweek.com
  SQL injection launched by AI agents
• AI Has Changed Attack Speed, Not Security Fundamentals 2026-10-01 · securityweek.com
  AI-accelerated exploitation (opinion)
• Zero Trust Creator Says Model Holds Firm Against AI-Assisted Attacks 2026-10-01 · securityweek.com
  AI-assisted attacks (defensive commentary)
• Google Rolls Out Gemini 4 Argon to Trusted Cyber Defenders, Plans Guardrail-Free Version 2026-10-01 · thehackernews.com
  Not applicable (model release for defenders)
• Google Launches Gemini 4 Argon With Guardrail-Free Access for Vetted Defenders 2026-10-01 · securityweek.com
  AI-driven vulnerability discovery
• Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures 2026-09-30 · thehackernews.com
  Abuse of trusted AI platform features as lures
• Hackers Use ChatGPT Custom GPTs in ClickFix Attacks 2026-09-29 · securityweek.com
  AI platform abuse for social engineering
• RatHat Android Malware Console Uses Gemini to Identify Higher-Value Victims 2026-09-28 · thehackernews.com
  AI used to prioritize fraud victims
• New x47.c Windows Botnet Weaponizes xAI Grok, AI API Draining 2026-09-26 · securityweek.com
  Malware using an LLM API to decide actions; AI API abuse
• The SOC Doesn't Need to Start Over with Every Alert 2026-09-25 · thehackernews.com
  AI-accelerated retry of attacks
• AI-Powered Campaign Targets Hundreds of Online Retailers 2026-09-24 · securityweek.com
  AI-driven vulnerability research and exploitation at scale
• 545 Hackers Tested It First. Now XRanges for AI Scores Your Security Agent 2026-09-23 · thehackernews.com
  Not applicable (benchmark for security agents)
• This Windows Malware is Built to Let Up to Four AI Models Vote on Its Next Move 2026-09-23 · thehackernews.com
  Malware directed by votes of multiple AI models
• AI-Powered Phishing Platform EvilTokens Disrupted by Microsoft 2026-09-23 · securityweek.com
  AI-powered phishing platform
• Microsoft Takes Down EvilTokens Device-Code Phishing Service Tied to 12,000 Inbox Compromises 2026-09-22 · thehackernews.com
  AI-driven device code phishing
• RatHat Android Trojan Uses AI for Automation 2026-09-21 · securityweek.com
  AI-driven device control by malware
• Claude Opus 5 Helped Researchers Take Over OpenAI Staff Accounts via Chained Flaws 2026-09-20 · thehackernews.com
  AI-assisted vulnerability chaining
• AI-Built Exploit and Sign-In Flaw Opened Path to Internal OpenAI Code 2026-09-18 · securityweek.com
  AI-assisted exploit development combined with a sign-in flaw
• RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall 2026-09-18 · thehackernews.com
  AI-driven mobile malware
• Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer 2026-09-18 · thehackernews.com
  LLM-written malware
• CISO's Expert Guide to Agentic Pentesting for Websites 2026-09-17 · thehackernews.com
  Not applicable (guidance on autonomous pentesting)
• AI Agents Breached 395 Organizations Using Non-Human IAM Credentials 2026-09-16 · VentureBeat
  AI agents mass-exploiting known vulnerabilities with non-human credentials
• Threat Intelligence Alone Won't Close the Exploitation Gap 2026-09-16 · thehackernews.com
  AI-assisted exploitation
• EU Chief Warns of AI-Powered Hacking, Moves to Rein In Social Media 2026-09-16 · securityweek.com
  AI-powered hacking (policy warning)
• First Agentic AI Data Breach Reported to Spanish Regulator 2026-09-16 · securityweek.com
  Autonomous agent chaining login, discovery and data access
• ⚡ Weekly Recap: Rogue AI Agents, WeChat Worm, PaperCut Attacks, AI Espionage, and Rootkits 2026-09-14 · thehackernews.com
  Multiple, including AI misuse
• Anthropic CEO Dario Amodei Says AI Industry Needs to Give Safety Measures Time to Catch Up 2026-09-13 · securityweek.com
  Not applicable (executive commentary)
• OpenAI Agents Linked to RubyGems Campaign That Gained RCE on RubyDoc Servers 2026-09-12 · thehackernews.com
  AI agent swarm supply-chain attack
• Users in Houthi-Held Yemen Tried to Develop Advanced Weapons With AI, Anthropic Says 2026-09-12 · securityweek.com
  AI misuse for weapons research (attempted)
• Russian State-Sponsored Hackers Use Claude to Rebuild Malware After Detection 2026-09-11 · thehackernews.com
  AI-assisted malware development
• Claude Used to Automate Exploitation and Data Theft Across Multiple Victims 2026-09-11 · thehackernews.com
  AI-automated intrusion and data theft
• PaperCut Flaws Exploited in AI-Powered Attacks 2026-09-11 · securityweek.com
  AI-assisted exploit development and deployment
• Anthropic Says Russian Hackers Used Claude AI to Automate Malware Evasion 2026-09-11 · securityweek.com
  AI-assisted malware evasion; targeting AI vendor infrastructure
• PaperCut Attacker Uses Hundreds of AI Agents to Compromise 440+ Instances 2026-09-10 · thehackernews.com
  AI-developed exploits used at scale
• AI Is Giving Lesser-Resourced Attackers Nation-State-Level Reach, Google Warns 2026-09-09 · securityweek.com
  AI-scaled attacks
• Autonomous AI Agents Compromise Thousands of Credentials in Under Six Hours 2026-09-08 · thehackernews.com
  Autonomous multi-agent credential harvesting
• GPT-6 Astra Scores 100% on ExploitBench as OpenAI Blocks PoC Exploit Requests 2026-09-04 · thehackernews.com
  Frontier model offensive cyber capability
• OpenAI’s Astra Crosses ‘Critical’ Cyber Threshold After Finding Zero-Days 2026-09-02 · securityweek.com
  Autonomous vulnerability discovery and exploitation capability
• Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another 2026-09-02 · thehackernews.com
  AI-assisted exploit adaptation (research)
• Experiment: Porting a PLC Exploit With AI Takes Hours and Hundreds of Dollars 2026-09-01 · securityweek.com
  AI-assisted exploit porting for industrial controllers
• Aurora Ransomware Operators Use Cursor AI in Attacks Against 10 Targets 2026-08-31 · thehackernews.com
  AI coding assistant used in intrusions
• OpenAI Agents Exploited Linux Kernel Flaw on Company’s Own Systems 2026-08-28 · securityweek.com
  Kernel privilege escalation exploited by AI agents
• OpenAI Bans Russian ChatGPT Accounts Used to Run Influence Operation 2026-08-26 · thehackernews.com
  AI-generated influence operation
• AI Speeds Up Malware Development, Not Its Success Rate: Analysis 2026-08-26 · securityweek.com
  AI-assisted malware development
• Fake Apple Support AI Calls Target Stolen-Device Owners for Passcodes and 2FA Codes 2026-08-26 · thehackernews.com
  AI voice agent vishing
• ⚡ Weekly Recap: AI-Powered PLC Attacks, GitLab Attacks, Stripe Key Leaks and More 2026-08-24 · thehackernews.com
  Multiple, including AI-assisted exploitation
• UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit 2026-08-24 · thehackernews.com
  AI-scaled server attacks
• 14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2 2026-08-22 · thehackernews.com
  Malicious packages delivering AI-assisted implant
• AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure 2026-08-20 · thehackernews.com
  AI-generated OT exploit scripts
• ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit, and More 2026-08-20 · thehackernews.com
  Multiple, including AI-assisted exploit research
• Hackers Using AI to Target Siemens PLCs in Critical US Sectors 2026-08-20 · securityweek.com
  AI-assisted OT attacks
• Phishing 3.0: The Fight Moves to Agent Versus Agent 2026-08-19 · thehackernews.com
  AI-generated phishing
• Researchers Disclose AI-Assisted SharePoint Exploit Chain Reaching Unauthenticated RCE 2026-08-11 · thehackernews.com
  Authentication bypass chained to RCE, found with AI assistance
• Kimsuky Builds Offline AI Stack to Boost Phishing and Automate Malware Development 2026-08-10 · thehackernews.com
  Self-hosted AI for phishing and malware development
• OpenAI’s Upcoming Astra Model Raises Autonomous Cyberattack Concerns 2026-08-10 · securityweek.com
  Potential autonomous cyberattack capability
• OpenAI's Next AI Model Astra Shows Cyber Performance Strong Enough to Trigger Pause 2026-08-10 · thehackernews.com
  Frontier model cyber capability
• AI-Assisted HTTP Terminator Finds Novel HTTP Desync Techniques and Apache Zero-Day 2026-08-07 · thehackernews.com
  AI-assisted vulnerability research
• OpenAI Disrupts Poipet Scam Network Using ChatGPT Across Multiple Fraud Schemes 2026-08-06 · thehackernews.com
  AI-assisted fraud
• When Vibe Hacking Turns AI into the Junior Hacker Every Adversary Always Wanted 2026-08-04 · thehackernews.com
  AI-assisted offensive capability
• Chinese Hacker Commands DeepSeek via Telegram to Launch Autonomous Attacks 2026-07-31 · thehackernews.com
  Autonomous agent-driven attacks from a single instruction
• Google AI Uncovers 13-Year-Old Chrome Flaw Amid Record Patching Pace 2026-07-31 · securityweek.com
  AI-driven vulnerability discovery
• ThreatsDay: AI-Powered Hacking, 370 Chrome Flaws, SonicWall Attacks, DNS Hijacking + 22 More Stories 2026-07-30 · thehackernews.com
  Multiple, including AI-powered hacking
• Claude AI Just Cracked a Post-Quantum Test Scheme and Found a Faster 7-Round AES Attack 2026-07-29 · thehackernews.com
  AI-assisted cryptanalysis (research)
• Researcher Says AI Helped Develop Linux Traffic-Control Race Into Root Exploit 2026-07-28 · thehackernews.com
  AI-assisted exploit development
• Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry 2026-07-24 · thehackernews.com
  Unattended AI agent post-exploitation
• In Other News: Dolphin X AI-Powered Malware, Car Anti-Theft Device Hack, 400 Linux Kernel Flaws 2026-07-24 · securityweek.com
  Multiple, including AI-powered malware
• Kimi K3 Agents Found Redis Zero-Days and Built RCE Exploit, Researchers Say 2026-07-24 · thehackernews.com
  AI-discovered memory flaws leading to RCE
• AI security threats UK SMBs July 2026 2026-07-23 · The Small Business Cybersecurity Guy
  AI-assisted victim profiling
• Google Launches Gemini 3.5 Flash Cyber AI to Find and Fix Software Vulnerabilities 2026-07-21 · thehackernews.com
  Not applicable (defensive model release)
• New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE Attack 2026-07-21 · thehackernews.com
  Ransomware targeting AI model and data files
• Exposed Server Reveals AI-Assisted Phishing Toolkit Behind WebDAV Malware Campaign 2026-07-20 · thehackernews.com
  AI-assisted phishing development
• Russian-Speaking Hacker Uses Google Gemini CLI to Control Botnet of Eight Dental Clinic PCs 2026-07-20 · thehackernews.com
  Attacker outsourcing operations to an AI CLI
• Hugging Face Hacked in Autonomous AI Attack 2026-07-20 · securityweek.com
  Autonomous AI-driven intrusion
• AI Can Find Bugs, But Human Knowledge Still Proves Them 2026-07-16 · thehackernews.com
  Not applicable (opinion)
• TuxBot v3 Evolution Shows Signs of LLM-Assisted IoT Botnet Development 2026-07-16 · thehackernews.com
  LLM-assisted botnet development
• Attacker Uses Suspected AI-Generated PowerShell Script to Map Active Directory 2026-07-13 · thehackernews.com
  AI-generated reconnaissance script
• Forg365 PhaaS Targets Microsoft 365 with Device Code and AitM Session Theft 2026-07-13 · thehackernews.com
  Phishing-as-a-service with AI-written lures
• ‘HalluSquatting’ Turns AI Hallucinations Into Botnet Delivery Mechanism 2026-07-10 · securityweek.com
  Adversarial hallucination squatting
• AI Attacks Move in Minutes. Join This Webinar on Building a Defense That Keeps Up 2026-07-09 · thehackernews.com
  AI-accelerated attacks
• AI Coding Tools Tricked Into Hacking Developer Machine via Decades-Old Technique 2026-07-09 · securityweek.com
  GhostApproval attack method
• Is AI Making Cyberattacks Worse for Small Businesses? 2026-07-08 · Sharp USA
  AI-assisted attacks on SMBs
• AI Coding Agents Found Triggering Endpoint Security Rules Built to Catch Attackers 2026-07-08 · thehackernews.com
  Legitimate AI agent activity resembling credential access and discovery
• 史上初のAIエージェント型ランサムウェア「JadePuffer」感染事例の報告 2026-07-03 · GIGAZINE（要約掲載：東京都中小企業サイバーセキュリティポータル）
  AI-agent-driven ransomware
• Agentic AI Used to Conduct Ransomware Attack via Langflow 2026-07-03 · securityweek.com
  Agentic AI-assisted ransomware attack
• ThreatsDay: AI Compute Hijacking, Apple Email Flaw, BlueHammer Ransomware + 14 Stories 2026-07-02 · thehackernews.com
  AI compute hijacking
• AI Agent Exploits Langflow RCE to Automate Database Ransomware Attack 2026-07-02 · thehackernews.com
  AI-agent-run ransomware
• SMBs Grapple with AI-powered Malware Fears Despite ... 2026-07-01 · ESET
  AI-powered malware (assessment)
• AI-Generated Browser Ransomware Abuses Chromium API on Windows, Linux, macOS, Android 2026-07-01 · thehackernews.com
  AI-generated browser ransomware
• In Other News: Chinese Mythos-Like AI, Tata Electronics Breach, Snyk Layoffs 2026-06-26 · securityweek.com
  Multiple, including AI threat warnings
• ThreatsDay Bulletin: Smart TV Proxyware, 24-Year curl Bug, AI Crime Forums + 13 More Stories 2026-06-25 · thehackernews.com
  Multiple, including AI crime forums
• Dawn of the Apex Agentic Adversary 2026-06-24 · thehackernews.com
  AI-accelerated exploitation (commentary)
• Agentic AI: The Weapon That No Longer Needs a Warrior 2026-06-23 · thehackernews.com
  Autonomous AI attacks (opinion)
• Decades-Old Squid Proxy Flaw ‘Squidbleed’ Can Expose User Data 2026-06-22 · securityweek.com
  Memory disclosure, found with AI assistance
• INTERPOL Warns Phishing, Ransomware, and AI Scams Are Rising Across Asia-Pacific 2026-06-22 · thehackernews.com
  AI-enabled scams
• AI Is Changing Cyber Risk. Here's How SMBs Can Respond. 2026-06-2026 · Harvard Business Review
  AI-driven cyber risk (guidance)
• Stolen AI Compute as Attack Infrastructure (LLMjacking) 2026-06-18 · Cloud Security Alliance Labs
  Autonomous agent-driven intrusion chain (LLMjacking context)
• Only 11% of SMBs Are Utilizing AI-Powered Defenses Amid Growing AI Threats 2026-06-18 · Security Magazine
  AI-enabled attacks (survey)
• ThreatsDay Bulletin: Claude Chat Abuse, NastyC2 npm Packages, Device-Code Phishing + 25 More Stories 2026-06-18 · thehackernews.com
  Multiple, including abuse of shared AI chat links
• Crypto Clipper Campaign Abuses Fake Reviews, AI Narrators, and VirusTotal Comments 2026-06-17 · thehackernews.com
  AI-assisted promotion of malware
• AI and Cybersecurity – Everything You Wanted to Know, But Were Afraid to Ask 2026-06-16 · securityweek.com
  AI in attack and defence (overview)
• Google Sues Chinese Smishing Network Accused of Using Gemini AI in Phishing 2026-06-13 · thehackernews.com
  AI-assisted smishing
• Guardz Report: 9 Out Of 10 SMBs Have Compromised Users as AI-Driven Attacks Reshape the MSP Threat Landscape 2026-06-11 · PR Newswire (Guardz)
  AI-driven phishing and BEC
• Researchers Build Self-Replicating AI Worm That Operates Entirely on Local, Open-Weight Models 2026-06-09 · thehackernews.com
  Autonomous AI worm (research)
• Claude Mythos Turns N-Days Into N-Hours With Rapid Exploit Creation 2026-06-09 · securityweek.com
  AI-accelerated exploit creation
• AI Phishing Is Crushing SOCs with Alert Volume: How to Reduce Tier 1 Overload 2026-06-08 · thehackernews.com
  AI-scaled phishing
• In Other News: Anthropic Maps AI Threats, Unpatched Comodo Flaw, Palantir Chief Eyed for CISA 2026-06-05 · securityweek.com
  Multiple, including AI threat mapping
• AI-Driven Exploitation is Destroying Vulnerability Management. Here’s How to Handle It. 2026-06-02 · thehackernews.com
  AI-driven exploitation
• The Zero-Knowledge Threat Actor and the End of Responsible Disclosure 2026-06-02 · securityweek.com
  AI-enabled low-skill attackers
• CISO Daily Briefing – Marimo LLM Agent Post-Exploitation Incident 2026-06-01 · Cloud Security Alliance Labs
  LLM agent automating post-exploitation
• ⚡ Weekly Recap: New Linux Flaw, PAN-OS Exploit, AI-Powered Attacks, OAuth Phishing and More 2026-06-01 · thehackernews.com
  Multiple, including AI-powered attacks
• AI Adoption, SaaS Disruption & Cybersecurity Risks 2026-05-30 · FINTECH.TV
  AI-scaled attacks
• AI in cybersecurity: SaaS security risks you can't afford to ignore 2026-05-30 · Kaseya
  AI-amplified identity attacks
• Sysdig catches first live LLM attack on AWS database 2026-05-29 · AIWeekly (reporting on Sysdig Threat Research)
  LLM agent automating cloud post-exploitation
• New Russia-Linked GREYVIBE Targets Ukraine with AI-Powered Cyberattacks 2026-05-29 · thehackernews.com
  AI-assisted espionage
• Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit 2026-05-29 · thehackernews.com
  LLM agent used for post-exploitation
• Russia-Linked ‘GreyVibe’ Attackers Use AI to Supercharge Cyberattacks 2026-05-28 · securityweek.com
  AI-assisted operations
• CERT-In Recommends 12-Hour Patching for Internet-Facing Flaws Amid AI-Assisted Attacks 2026-05-26 · thehackernews.com
  AI-automated vulnerability exploitation
• ThreatsDay Bulletin: Linux Rootkits, Router 0-Day, AI Intrusions, Scam Kits and 25 New Stories 2026-05-21 · thehackernews.com
  Multiple, including AI-assisted intrusions
• Is AI Making Cyberattacks Worse for Small Businesses? 2026-05-20 · Sharp USA (Simply Smarter Blog)
  AI-driven phishing and deepfakes
• Sysdig Researchers Document JADEPUFFER: First End-to-End Ransomware Attack Executed by an AI Agent 2026-05-15 · Synthreo (quoting Sysdig research)
  AI-agent-driven ransomware via Langflow RCE
• SMBs Hit a Cybersecurity Breaking Point as 91% Fear AI-Powered Threats 2026-05-06 · Yahoo Finance
  AI-enhanced attacks (survey)
• SMBs Falling Behind in AI-Powered Cyber Defenses, CrowdStrike Study 2026-05-05 · SC World (reporting CrowdStrike study)
  AI-enabled attacks (survey)
• AI agent and LLM misuse drives new attack and governance risks 2026-03-25 · Mallory AI
  LLM-assisted exploit development; risky local agent runtimes
• AI, Data Theft & The 57% Rise in SMB Cyber Crime | Microsoft Security Explained 2026-03-18 · Microsoft Security (YouTube)
  AI-enabled identity attacks
• Prompt Steel: Russia-linked threat group uses LLM-powered tool to automate data theft 2026-03-15 · Cybersecurity YouTube briefing (AI-Driven Cyber Threats Surge: SMBs Embrace MDR, Shadow AI, and Evolving Malware Tactics)
  LLM-generated commands for data theft
• SMBs in the Age of AI: Navigating Cyber Complexity and Risk 2026-03-15 · Sage / IDC (YouTube)
  AI-accelerated attacks on SMBs
• AI-Driven Cyber Attacks: What SMBs Must Do to Defend in 2026 2026-03-05 · Cyber Advisors
  AI-assisted BEC and deepfakes
• Small and Medium Business Cyberattacks and the AI Security Gap 2026-01-15 · Microsoft
  AI-amplified attacks on weak SMB basics
• Cyber Readiness for SMBs: Getting the Basics Right in the Age of AI 2025-12-09 · WeLiveSecurity (ESET)
  AI-increased threat volume
• UK NCSC warns that generative AI will “almost certainly” increase cyber threats to all organizations 2024-01-25 · UK National Cyber Security Centre (NCSC)
  AI-enabled attacks (assessment)