Overview Rootkits remain one of the most dangerous classes of malware because they operate at the lowest levels of the system. Traditionally, rootkits depended on static techniques to hide files, processes, and registry entries. AI has now introduced a dynamic… Read More ›
A new National Bureau of Economic Research (NBER) working paper, How People Use ChatGPT (Chatterji, Cunningham, Deming, Hitzig, Ong, Shan, and Wadman, 2025, NBER Working Paper No. 34255), provides a detailed look at global ChatGPT usage. This post summarizes the… Read More ›
Overview Industrial Control Systems (ICS) power critical infrastructure including energy, water, and manufacturing. Historically, ICS attacks required deep expertise and manual reconnaissance. Now, AI is enabling attackers to map, analyze, and exploit ICS environments with unprecedented precision, raising the stakes… Read More ›
Overview Every organization faces thousands of vulnerabilities, but not all are equal. Security teams use risk-based prioritization to decide what to patch first. Now, attackers are using AI to do the same — but in reverse. AI-assisted vulnerability prioritization allows… Read More ›
Overview Disinformation is not new, but AI has given it a powerful upgrade. With large language models, deepfake generators, and automated distribution, attackers can create coordinated disinformation campaigns at scale. This is more than fake news. It is an industrialized… Read More ›
Overview Ransomware has evolved from crude “spray and pray” attacks into highly targeted operations. Now, attackers are using AI to optimize every phase of the kill chain from choosing victims to encrypting data. The result is AI-optimized ransomware: faster, stealthier,… Read More ›
Overview Insider threats aren’t always intentional. Attackers are now using AI to craft highly personalized lures designed to trick employees into revealing secrets, clicking malicious links, or violating company policies. These AI-generated insider lures exploit human trust and organizational context,… Read More ›
Overview Zero-day vulnerabilities — flaws unknown to vendors and unpatched in the wild — have always been the most dangerous exploits. Now, AI is reshaping the landscape by accelerating both discovery and weaponization of zero-days. From mining bug bounty reports… Read More ›
Overview Most defenders think of prompt injection as a single malicious input. But attackers are now chaining multiple prompts and responses together to create adversarial prompt chains — multi-step exploit flows that gradually bypass restrictions, escalate access, and produce malicious… Read More ›
Overview Financial institutions and e-commerce platforms rely on fraud detection systems to stop criminals in real time. But attackers are now deploying AI to evade these defenses, generating transactions, logins, and behaviors that look “normal” to detection models while carrying… Read More ›