Microsoft counted more than a million of them between August 3 and 5, each carrying a fabricated ServiceNow invoice and a staged executive email thread, with the attacker's beneficiary bank details changing between targets.
Reality
- Evidence60
- Adoption
- Not scored
- Hype gap+20
- Incentives
- Not scored
- Confidence62
Microsoft says Storm-3168, also tracked as JADEPUFFER, used two stolen Azure service principals to try deleting more than 100 storage accounts. The deletions took about seven minutes, so the 17 hours of API reads before them were when anyone watching those identities had time to act.
Perspective Coverage
6 publishers
- Builder
- Builder 23%
- Operator
- Operator 70%
- Investor
- Investor 7%
Reality
- Evidence72
- Adoption
- Not scored
- Hype gap+25
- Incentives55
- Confidence70
PwC surveyed 3,934 leaders and found 52% rank attacks on AI systems as their biggest cyber preparedness gap. Only 17% place AI risk with the CISO, so in most of the sample the security function does not own the threat it feels least ready for.
Perspective Coverage
3 publishers
- Builder
- Builder 28%
- Operator
- Operator 57%
- Investor
- Investor 15%
Reality
- Evidence55
- Adoption35
- Hype gap+15
- Incentives40
- Confidence60
Swimlane surveyed 500 US and UK security staff and found 24% say AI has limited their ability to build skills. Satisfaction barely differs between those who say AI helps their skills and those who say it hurts, so morale scores cannot show whether juniors are learning.
Reality
- Evidence50
- Adoption50
- Hype gap+15
- Incentives65
- Confidence55
Espionage crews exploited a Chrome flaw that Chromium had already fixed in public source
Proofpoint says a shared toolkit called BlueMoon chained two V8 flaws that Chromium had fixed in public but Chrome had not yet shipped, plus a Windows kernel bug that elevates only on older builds.
Reality
- Evidence62
- Adoption58
- Hype gap+18
- Incentives66
- Confidence58
FBI names Nanjing contractor behind 300-victim Check Point Quantum Gateway campaign
The August 26 advisory, written with the NSA and Cyber National Mission Force, describes QTFY running its own scanning, proxying and botnet platforms since 2018. Commodity indicator feeds will not find it.
Reality
- Evidence63
- Adoption
- Not scored
- Hype gap+12
- Incentives60
- Confidence58
Swimlane's new router treats cost per alert, not analyst hours, as the SOC's binding constraint
Its CEO puts AI investigations at $5 to $10 each, which makes the new triage layer's real job deciding which alerts never touch a model at all.
Reality
- Evidence22
- Adoption16
- Hype gap+45
- Incentives80
- Confidence33