Topic
Cyberattacks that use AI systems, such as language models or autonomous agents, to automate exploitation, malware control, or other offensive tasks.
Gambit Security says an operator chained three open-source AI tools to steal more than 600,000 unexpired card records from two companies. The operator's own review put the average completed scan at $25.46.
Reality
Five Eyes cyber agencies issued a call-to-action in June 2026 saying AI was accelerating the speed, scale and sophistication of cyber threats. In a June 25, 2026 newsletter, Risky Business's Tom Uren read it as the agencies' view that limiting AI's offensive capabilities to benign actors was no longer possible.
Reality
Recorded Future says TAG-217 was testing infrastructure and assembling attack tools in August 2026, weeks before South Korea's bank breaches surfaced. Insikt says exposed directories gave it the timeline and give defenders openings to spot related activity.
Reality
Paul Chichester, the NCSC's director of operations, says Russia, China, North Korea and Iran all use AI to attack the UK. New Scientist's report of the interview includes no attack counts, so the size of any rise in volume is unstated.
Reality
Semperis's survey of 1,200 IT and security professionals reports AI in the ransomware attacks on 84% of surveyed victims. The survey counts victims, and the people quoted on its meaning are tied to Semperis. The 87% who saw identity systems targeted give budget owners firmer ground this quarter.
Reality
Booz Allen's frontier AI models met all eight attack objectives against an isolated industrial-control testbed in its Chantilly, Virginia lab. In the last test a model took administrative control of a robotic arm and moved it.
Reality
Shinhan Financial's board took up information security five times between March 2025 and May 2026, according to minutes Seoul Economic Daily reviewed. Analysts quoted by the paper say the effectiveness of those security systems needs examining.
Reality
SOCRadar estimates broker CyberXero stole more than 628,000 records from four Ukrainian organizations with Claude Code and Cobalt Strike. The actor left a server open, and its logs show where the model's refusals held and where a fresh session got around them.
Reality
Cohesity data puts Qilin and The Gentlemen behind 32% of UK ransomware attacks. UK volume rose 60% on the quarter, and a watchlist of two names covers a third of it, leaving 68% with other actors.
Reality
More than 20 major Japanese companies have disclosed cyberattacks in recent weeks, the Financial Times reported. Tokyo's instructions to ministries and companies are basic. The recent cases put operators' exposure in their vendors and their ID handling.
Reality
Korea's Financial Security Institute detected an AI-agent attack on iM Bank on Aug. 28 that used a web shell and leaked no data. The agent's part was reconnaissance, where analysts expect speed and scale to grow.
Reality
President Lee Jae Myung says AI appears to have been used in hacks on South Korean banks that leaked data on at least 25,000 Shinhan customers. If his claim that AI removes the need for specialized skills holds up, banks should plan for many more attackers.
Perspective Coverage
18 publishersReality
OpenAI and Anthropic executives are rehearsing the political fallout of an AI cyberattack many insiders expect within six to 12 months, Axios reported. Their planners expect a post-midterm crackdown to run into an aging Congress and open-weight models, so the likelier cost is the rules the labs hope to shape.
Perspective Coverage
7 publishersReality
Fitch expects the possibly AI-assisted breaches at nine South Korean banks to bring penalties, compensation costs and higher security spending. No material losses have appeared yet, so the early cost lands on bank budgets while incident counts in Korea and Japan keep rising.
Reality
A single actor used a free Chinese pentest agent and four commercial AI models to breach South Korean financial firms in about two weeks. The free, resold toolkit let one person breach several firms at once, and researchers expect adversaries to keep using it to lift their tempo.
Reality
Korea's Financial Supervisory Service told financial firms that blocking the 30 IP addresses tied to suspected AI-agent attacks will not be enough. Attackers can swap addresses through proxies, so the regulator wants firms to judge how requests behave.
Reality
Anthropic says an alleged ShinyHunters member decompiled apps pulled from multiple stores and routed verified TruffleHog hits into a Telegram channel sorted by service, and those credentials opened most of his confirmed breaches.
Perspective Coverage
6 publishersReality
President Lee Jae Myung ordered resources onto a breach of customer data at seven Korean financial firms, citing possible AI use in some attacks. What the firms pay will turn on a network law amended five days earlier and on which ministry runs the case.
Reality
South Korea's financial regulator gave lenders until Thursday to check every internet-facing system after hackers breached at least seven banks. Attackers entered through tools built for loan recruiters and staff, so the repair falls on how much credit data banks let outsiders see.
Reality
Korea's National Police Agency booked the AI-driven attack on Shinhan Bank as a criminal case and assigned 28 cyberterrorism investigators to it. Whether the case moves to the new Serious Crimes Investigation Agency turns on how the Financial Services Commission classifies the bank's system.
Reality
Invest · October 4, 2026 · Confirmed2 publishers
Security · August 24, 2026 · Confirmed2 publishers
Product · August 27, 2026 · Confirmed5 publishers
Build · August 28, 2026 · Confirmed3 publishers
Security · August 27, 2026 · Confirmed5 publishers
Security · September 10, 2026 · Confirmed6 publishers
Security · September 11, 2026 · Confirmed2 publishers
Build · September 10, 2026 · Confirmed5 publishers
Invest · August 30, 2026 · Confirmed8 publishers