AI-Driven Cyber Threats Surge with Agentic Adversaries
Article Content
- •Agentic adversaries are reducing intrusion times to minutes using AI.
- •A 36% increase in disclosed vulnerabilities was reported in Q2 2026.
- •Credential theft remains the dominant method for ransomware attacks.
In September 2026, cybersecurity reports reveal a significant rise in agentic adversaries utilizing AI for intrusions, reducing attack timelines to mere minutes. CrowdStrike noted that the average breakout time for intrusions has dropped to 29 minutes, with some operations completed in under a minute. Concurrently, Beazley Security reported a 36% increase in newly disclosed vulnerabilities attributed to AI's influence on security research. Despite this increase, traditional attack methods, particularly credential theft, remain the primary vector for ransomware attacks, accounting for 67% of incidents. The Sality botnet disruption was highlighted as a major defensive effort against these evolving threats. The landscape is shifting rapidly, with AI both complicating defenses and enabling faster attacks.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track Sality in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…
Korean-speaking Hackers Target PHP Vulnerabilities in Global Campaign A cybersecurity report from Cyfirma reveals that attackers, possibly linked to North Korea's Lazarus group, are preparing to exploit critical vulnerabilities in PHP (CVE-2026-109618 and CVE-2026-109619). These vulnerabilities allow unauthenticated remote code execution, posing a significant threat to government…