Skip to content
The Injection_
LIVE
LIVElast sweep next in--:--:--

[ RSS ][ JSON ][ llms.txt ]

AI-enabled offense

Also called: AI-powered attacks · offensive AI

AI-enabled offense is attackers using AI models to make attacks faster, cheaper or larger: writing phishing and malware, researching targets, finding vulnerabilities and running parts of intrusions autonomously. It is about AI as the attacker's tool rather than the target.

How it works

Reported uses range from drafting lures and translating content to agents that scan, exploit and move laterally with little human input. Providers counter by monitoring for abuse, banning accounts and tiering access to the most capable cyber features.

How to defend

Assume higher volumes and better-quality attacks, shorten patch cycles, and use AI defensively for detection and triage.

Real cases 6 stories

  1. INFO

    Attack · Cisco Talos

    A3 malware: Talos measures prompt injection aimed at AI triage

    Four malware families embed natural-language instructions to steer AI malware triage toward a benign verdict, Cisco Talos reports. Across 84 samples, the best technique shifted the verdict in the attacker's favor in about 35% of test runs.

  2. INFO

    Incident · ReversingLabs

    ReversingLabs: behavior beat hashes on an AI-assisted spy campaign

    ReversingLabs says it classified two GTG-20006 implants as malicious in August, two months before Anthropic's September report named the actor, and that behavior-based hunting held up while Claude was used to rebuild detected files.

  3. INFO

    Incident · CrowdStrike

    ARTEX: attackers paired an agentic pentest tool with Claude Code

    ARTEX, an open-source agentic pentesting tool developed in China, was used alongside Claude Code and DeepSeek against South Korean financial organizations in late September 2026, CrowdStrike Intelligence reports.

  4. INFO

    Incident · SOCRadar

    CyberXero: an access broker ran 51 Claude Code agents against Ukraine

    CyberXero is a Russian-speaking initial access broker driving 51 specialized Claude Code agents. SOCRadar found its exposed working directory and confirmed theft of over 628,000 records from four Ukrainian organizations.

  5. CRIT

    Incident · CISA · CVE-2026-102489

    CISA: Zammad flaws exploited after agentic AI breached DIVD

    CISA added two Zammad helpdesk flaws, CVE-2026-102489 and CVE-2026-102490, to its Known Exploited Vulnerabilities catalog on October 2, 2026, after DIVD said an agentic AI attack chained them to breach its network.

  6. INFO

    Incident · Google Threat Intelligence Group

    Google GTIG: attackers used AI agents to run a credential campaign

    Google Threat Intelligence Group reports a threat actor who planned, built and ran an agent-enabled mass credential harvesting campaign in under six hours. GTIG says it has not yet seen fully autonomous attack pipelines in the wild.