Skip to content
Today
Sections

Topic

AI-Driven Cyberattacks

Cyberattacks in which AI models or autonomous agents handle reconnaissance, exploitation and lateral movement, reducing the need for a human operator.

Current stories

securityConfirmed4 publishers

Over half of 1,300 surveyed security leaders admit their firms leave known high or critical flaws unpatched

Chainguard's 1,300-leader survey finds 66% at $1bn-plus firms knowingly leave high or critical flaws unpatched at least sometimes, versus 27% under $250m. The all-respondent rate is 54%, LeadDev reported, with testing and disruption the stated blockers.

Publishers:chainguard.dev infosecurity-magazine.com leaddev.com scworld.com

Perspective Coverage

4 publishers
Builder
Builder 34%
Operator
Operator 62%
Investor
Investor 4%

Reality

Evidence55
Adoption50
Hype gap+25
Incentives65
Confidence55
investOne report1 publisher

Korea's regulator widens its AI security exemption to about 15 more financial firms

Korea's Financial Services Commission is due on the 7th to name about 15 more financial firms exempt from network separation rules, after a first round of 10. Network separation rules are what stop lenders running AI security tools, so the list decides who can use AI against AI-driven hacking.

Publishers:en.sedaily.com

Reality

Evidence45
Adoption
Not scored
Hype gap+25
Incentives60
Confidence50
securityOne report1 publisher

An LLM agent ran a database-extortion campaign end to end through an unpatched Langflow server

Sysdig says an LLM-driven operator it calls JADEPUFFER ran a database-extortion campaign on its own, entering through unpatched Langflow flaw CVE-2025-3248. It calls the operation the first documented ransomware run end to end by a model.

Publishers:sysdig.com

Reality

Evidence50
Adoption
Not scored
Hype gap+25
Incentives70
Confidence50
investOne report1 publisher

Palo Alto's record $325 billion valuation is 28 times its fiscal 2026 revenue

Palo Alto Networks crossed $400 a share for the first time this week, lifting its market value to a record of about $325 billion. The climb has turned CEO Nikesh Arora's $10 million share purchase in March into a stake worth about $27 million.

Publishers:calcalistech.com

Reality

Evidence55
Adoption
Not scored
Hype gap+30
Incentives72
Confidence50
productOne report1 publisher

A 27-second intrusion headlines a CrowdStrike report that averages 29 minutes

CrowdStrike's 2026 Global Threat Report carries both numbers, and the gap between them decides whether a control has to run without a person or can wait for someone on shift to look.

Publishers:siliconangle.com

Reality

Evidence46
Adoption18
Hype gap+42
Incentives82
Confidence52