Proofpoint researcher says hackers' heavy use of AI is leading to sloppier attacks
Proofpoint's Selena Larson says threat actors relying on AI are making many mistakes. She sees little evidence that AI has made their attacks more sophisticated.
Defenders can watch for AI-made errors in attacks, but should not assume AI-driven threats are always more advanced.
aii.news picks and summarizes stories from trusted news sources with the help of AI. Every story links to the original reporting. How we work.
Keep reading
-
Anthropic releases Claude Fable 5.2 and Mythos 5.2, topping a multi-stage cyberattack benchmark
Anthropic released Claude Fable 5.2 and Claude Mythos 5.2, saying both improve on coding, reasoning and vision. Fable 5.2 beat GPT-6 Cyber on a benchmark that tests multi-stage cyberattacks.
Why it mattersStronger frontier models help developers do more, but their growing cyberattack skills raise the stakes for security teams.
-
Cursor confirms breach let hackers push a malicious Claude Code extension through its marketplace
Cursor confirmed a security breach that allowed attackers to distribute a malicious Claude Code extension through its marketplace. The attackers used credentials stolen from AI infrastructure provider Fireworks AI.
Why it mattersDevelopers who installed extensions from Cursor's marketplace should check their tools, because one stolen credential can spread through the AI supply chain.
-
FBI says North Korean hackers stole over $400 million in crypto using deepfake video calls
The FBI says hackers tied to North Korea stole more than $400 million in cryptocurrency over 18 months in a social engineering scheme codenamed FaceStealer that used deepfake video calls. The finding was part of a coordinated set of US government actions.
Why it mattersA familiar face on a video call is no longer proof of identity, so crypto firms and finance teams need extra checks before moving money.
-
Chinese-speaking hackers used open-source AI pentest tool to breach 10 organizations
Palo Alto Networks Unit 42 says attackers paired the open-source AI pentesting framework Cairn with Chinese models GLM and DeepSeek to run 25 operations against at least 19 organizations in August and September 2026. They gained access or took data at 10 targets, mostly in semiconductors, advanced manufacturing and defense, often after giving little more than a domain name and a one-line goal.
Why it mattersAutonomous AI attack tools are now being used in real campaigns, so defenders must assume attacks can run at machine speed with little human effort.
-
Microsoft's AI bug hunter finds Rust standard library flaw hidden for nearly 11 years
Microsoft FORGE Lab researchers used AI to find a memory-safety bug in Rust's standard library that went unnoticed for almost 11 years, plus other flaws that can cause undefined behavior even in safe Rust code. Two findings affect stable Rust.
Why it mattersAI tools are now finding old bugs in trusted code, so developers should expect more patches, and attackers may find bugs this way too.
