All articles tagged with #cyberattacks
Security experts warn that powerful AI models are enabling automated, human-driven cyberattacks that bypass traditional defenses, with real incidents at OpenAI and Hugging Face illustrating vulnerabilities; as AI capabilities grow faster than security controls, executives fear outages of critical services and potential lawsuits, underscoring the need for stronger internal safeguards and defensive AI testing.
Iranian hackers have targeted a broad set of U.S. critical infrastructure—water systems, telecommunications, energy and more—in recent weeks. The attempts have so far been unsuccessful, but a hacker group warned that “unexpected and critical events” could be coming as aging power grids strain unpredictable demand.
President Donald Trump signed an order authorizing select private companies to carry out government-sponsored cyberattacks against foreign criminal hacking groups, a shift from the traditional approach that reserved such actions for U.S. intelligence and defense agencies. The plan includes a DOJ-DHS coordination center to oversee participating firms and aims to disrupt cybercrime, but it raises potential legal and geopolitical risks and explicitly excludes operations against foreign governments.
US intelligence warns Putin could authorize deniable hybrid actions—such as cyberattacks and other covert measures—onto NATO territory to test alliance cohesion and Western willingness to respond, a move seen as probing Western resolve rather than triggering a full-scale war; officials point to recent Baltic incursions and drone incidents as context, while NATO leaders stress the alliance’s commitment to collective defense.
Trump blamed Gov. Walz for Minnesota’s water-hacking incidents, while FBI, EPA and CISA warn of a broader campaign likely tied to Iran. Minnesota reports breaches at about 30 community water systems, with advisories urging operators to take vulnerable PLCs offline and issue boil-water notices as investigators examine a growing, multi-state threat to U.S. water infrastructure.
Britain’s top intelligence official from GCHQ warns that Russia is relentlessly targeting the UK and Europe’s critical infrastructure, democratic processes, supply chains and public trust, accusing Moscow of stealing technology and plotting sabotage and assassination attempts. The director, Anne Keast-Butler, urges cybersecurity to be made dramatically more urgent as AI advances tighten the competitive landscape, and she emphasizes the need for stronger international partnerships to counter growing gray-zone cyber threats.
AI-driven cyberattacks could hijack satellites or cause collisions, sparking a debris cascade in low Earth orbit within two years. Experts warn that older satellites often lack cyber protections, and autonomous AI could accelerate reconnaissance and exploitation of space assets, risking widespread orbital damage.
Microsoft's Threat Intelligence report finds threat actors are using generative AI to speed up and scale cyberattacks across the entire lifecycle—drafting phishing emails, creating malware, developing infrastructure, and fabricating realistic identities for remote‑worker schemes—while defenders should strengthen identity, detect credential abuse, and secure AI systems; the trend is echoed by Google and Amazon.
A POLITICO poll across the US, Canada, France, Germany and the UK shows a majority view cyberattacks that disrupt hospitals or other critical infrastructure as acts of war, while NATO debates thresholds for response and governments push to bolster cyber defenses amid rising state-linked cyber activity.
A sponsored Visual Capitalist infographic (in partnership with Unit 42 by Palo Alto Networks) outlines how cyberattackers breach systems by exploiting identity. Identity-based techniques drive about 65% of initial access, with social engineering and credential misuse leading the way, and 90% of recent investigations showing identity weaknesses as material. Once inside, over-privileged identities and token abuse enable rapid lateral movement, making identity the practical perimeter. Defenses recommended include phishing-resistant MFA (passkeys/FIDO2), rotating machine credentials, shorter sessions, just-in-time elevation for admins, and cross-cloud identity telemetry to detect unusual access chains.
The NSB reports a significant increase in Chinese cyberattacks on Taiwan's critical infrastructure in 2025, with attacks averaging 2.63 million daily attempts, especially targeting energy and emergency sectors, employing tactics like vulnerability exploitation, DDoS, social engineering, and supply chain attacks, involving major hacker groups and international cooperation to enhance cybersecurity defenses.
The article highlights various high-profile security failures caused by weak passwords, including a Louvre CCTV breach, a US pipeline ransomware attack, nuclear launch code vulnerabilities, a UK business collapse due to hacking, and scandals involving phone hacking and political data breaches, emphasizing the importance of strong, unique passwords and layered security measures.
Advancements in AI are enabling hackers to launch faster, smarter, and more personalized cyberattacks, posing significant threats to critical infrastructure, financial services, and organizations worldwide. While malicious actors are leveraging AI for malicious purposes, cybersecurity professionals are also using AI to enhance defenses, automate threat detection, and respond more effectively, creating a high-stakes race between attackers and defenders.
Microsoft reports a significant increase in the use of AI by Russia, China, Iran, and North Korea to conduct cyberattacks and spread disinformation against the US, with over 200 instances of AI-generated fake content identified in July alone, highlighting the urgent need for improved cybersecurity defenses.
Cybersecurity experts warn that criminal hackers are rapidly exploiting generative AI tools to enhance their cyberattacks, raising concerns about the ability to defend against these evolving threats.