www.scworld.com AI-Driven Cyberattacks Surge, Vulnerabilities Triple in 2026
Article Content
- •Cyberattacks have surged in 2026, with vulnerability reports tripling to 37,000.
- •AI is being used by both attackers and defenders, creating a competitive landscape.
- •Significant incidents include the theft of $6.3 billion in crypto and attacks on refrigeration systems in Europe.
Cyberattacks have intensified in both frequency and sophistication since the start of 2026, with attackers leveraging AI for intrusion and exploitation. The number of vulnerabilities reported in Q3 2026 reached approximately 37,000, tripling from the previous year. Notably, the median time between initial network access and handoff to secondary threat operations has plummeted to just 22 seconds. Major incidents include attacks on European supermarkets, where hackers manipulated refrigeration systems, resulting in millions in food waste. The cryptocurrency exchange Binance suffered a large theft of $6.3 billion in crypto assets. Companies like Ionos and Booking.com are ramping up their AI defenses, with Ionos implementing AI-based monitoring and remediation systems to cope with the surge in threats. The landscape reflects an ongoing arms race between attackers and defenders, with both sides increasingly relying on AI technologies.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Ahold Delhaize in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
What types of vulnerabilities are increasing?
How are companies responding to the surge in attacks?
What industries are most affected by these cyberattacks?
Continue Reading
CVE-2026-121392 in FreeRDP Exposes RDP Sessions to Interception A vulnerability, CVE-2026-121392, has been identified in FreeRDP versions prior to 3.32.2, which allows man-in-the-middle attackers to bypass server identity checks. The flaw arises from improper certificate validation in the tls_verify_certificate() function, permitting attackers with a trusted certificate to…