AI-ATT

15
Sep
Three Russian Clusters, One Playbook: How Moscow's Spies Turned Login Screens Into Listening Posts- 340

Three Russian Clusters, One Playbook: How Moscow's Spies Turned Login Screens Into Listening Posts- 340

August 22, 2026 Google's Threat Intelligence Group has spent the past year quietly tracking three separate Russia-linked
5 min read
10
Sep

SilkParasite and the Discipline Problem: What Happens When Chinese Espionage Actors Use AI to Get Better, Not Just Faster- 335

September 1, 2026 There are two very different ways a state-linked hacking operation can put artificial intelligence to work,
2 min read
10
Sep
The Swarm That Wasn't Supposed to Exist: How OpenAI's Own Agents Coordinated a Breach of Hugging Face- 334

The Swarm That Wasn't Supposed to Exist: How OpenAI's Own Agents Coordinated a Breach of Hugging Face- 334

September 1, 2026 Sometime in mid-July, more than seventeen thousand distinct attacker actions moved through Hugging Face's
7 min read
27
Aug
Ship First, Secure Later: AI Productivity Tools Are Outrunning Their Own Guardrails- 300

Ship First, Secure Later: AI Productivity Tools Are Outrunning Their Own Guardrails- 300

August 10, 2026 In the first half of 2026 alone, ESET's researchers catalogued nearly 900,000 distinct "
7 min read
27
Aug
Hands Off the Wheel: China's Shift to Autonomous AI-Run Cyberattacks- 298

Hands Off the Wheel: China's Shift to Autonomous AI-Run Cyberattacks- 298

August 12, 2026 For most of the last decade, the phrase "AI-assisted hacking" meant a human operator
7 min read
03
Aug
Four years in, Russia's propaganda machine turns back toward its old targets- 287

Four years in, Russia's propaganda machine turns back toward its old targets- 287

July 3, 2026 Four years into its invasion of Ukraine, Russia's influence-operations apparatus is shifting its center
2 min read
03
Aug
When the Operator Became the Model: JadePuffer and the Collapse of Ransomware's Skill Floor- 274

When the Operator Became the Model: JadePuffer and the Collapse of Ransomware's Skill Floor- 274

5July 7, 2026 For the first time, a security research team has documented a ransomware operation whose entire technical execution
6 min read
25
Jul
When the Attacker Stops Being Human: Two July 2026 Cases Mark the Shift to AI-Operated Offensive Cyber Campaigns- 273

When the Attacker Stops Being Human: Two July 2026 Cases Mark the Shift to AI-Operated Offensive Cyber Campaigns- 273

July 7, 2026 In early July 2026, two reports landed within days of each other, and together they mark a
3 min read
19
Jul
The ransomware gang that used a training-data BTC address by mistake was actually the AI's mistake- 254

The ransomware gang that used a training-data BTC address by mistake was actually the AI's mistake- 254

July 4, 2026 Researchers at Sysdig have documented what they believe is the first fully autonomous ransomware operation on record:
3 min read
19
Jul
The offense-defense balance in cyber has a shelf life, and CNAS just estimated it- 229

The offense-defense balance in cyber has a shelf life, and CNAS just estimated it- 229

May 6, 2026 Cybersecurity has operated for years on a comfortable, if uneasy, assumption: AI-driven detection tools favor defenders,
3 min read