Markets.Businessinsider

Human Operators Drive Cyberattacks Despite AI Advancements

First seen 21 Oct 2026, 15:41 UTC • •42.9

Article Content

1 / 5

Browse articles

ThreatCluster •October 21, 2026 at 17:09 UTC

•Human operators remain the primary drivers of cyberattacks, despite AI advancements.
•Attackers exploit high-severity vulnerabilities within an average of three days.
•U.S. organizations lead in ransomware listings, significantly outpacing other countries.

Rapid7's Quarterly Threat Landscape Report reveals that human operators are still the primary drivers of cyberattacks, with AI being an operational component in only 8% of incidents. The report highlights that attackers exploit high-severity vulnerabilities within an average of three days, with 71% of these occurring in the first week. U.S. organizations are significantly affected, accounting for 1,112 ransomware listings, which is eight times that of Germany. The report emphasizes the need for security teams to prioritize rapid patching of remotely exploitable vulnerabilities. Key vulnerabilities exploited include those that require no authentication or user interaction, providing attackers with direct access. The findings underscore the importance of behavioral detection and response in cybersecurity operations.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated just now How this analysis works

Timeline

2026-10-21

Rapid7 releases Quarterly Threat Landscape Report

The report shows that human operators drive most cyberattacks, with AI involvement in only 8% of incidents.

More articles in this cluster (4)

Threat Graph

8 entities, 15 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (4)

Ransomware
T1003 - OS Credential Dumping
T1021 - Remote Services
T1059 - Command and Scripting Interpreter

Threat Actor (3)

Inc Ransom
Qilin
The Gentlemen

Vulnerability (1)

Holy Grail

Relationships

Inc Ransom uses Ransomware
Inc Ransom uses T1003 - OS Credential Dumping
Inc Ransom uses T1021 - Remote Services
Inc Ransom uses T1059 - Command and Scripting Interpreter
Qilin uses Ransomware
Qilin uses T1003 - OS Credential Dumping
Qilin uses T1021 - Remote Services
Qilin uses T1059 - Command and Scripting Interpreter
The Gentlemen uses Ransomware
The Gentlemen uses T1003 - OS Credential Dumping
The Gentlemen uses T1021 - Remote Services
The Gentlemen uses T1059 - Command and Scripting Interpreter
Inc Ransom exploits Holy Grail
Qilin exploits Holy Grail
The Gentlemen exploits Holy Grail

Following this threat?

Track Inc Ransom in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

What percentage of attacks involve AI?

AI is involved in only 8% of tracked cyber incidents according to the report.

How quickly do attackers exploit vulnerabilities?

Attackers exploit high-severity vulnerabilities within an average of three days, with 71% occurring in the first week.

What should security teams prioritize?

Security teams should prioritize identifying exposed assets and rapidly patching remotely exploitable vulnerabilities.

Continue Reading

SafePay Ransomware Group Targets 600 Organizations Worldwide The SafePay ransomware group has compromised at least 600 critical infrastructure organizations globally, as reported by the U.S. Cybersecurity and Infrastructure Security Agency (CISA) and other agencies. Active since August 2024, SafePay employs double extortion tactics, exfiltrating data and encrypting systems to…

Chinese Smishing Gang Targets Ireland and Four Other EU Countries Ireland is identified as one of five EU countries targeted by the Chinese text-scam group known as Smishing Triad, as reported by the EU cyber security agency Enisa. This group conducts large-scale smishing operations, which involve sending fraudulent text messages that impersonate legitimate organizations to steal…