Dark Reading
Identity Attacks Overtake Exploits as Top Ransomware Cause
Email-driven identity attacks have surpassed vulnerability exploits as the leading cause of ransomware incidents, shifting attention toward credential misuse. Although MFA was present in 97% of credential-based attacks, weak implementations and attacker bypass techniques often rendered it ineffective. The article emphasises phishing-resistant MFA and stronger identity-security controls.
CSO Online
AI-Powered Breaches Provide Wake-Up Call for Incident Response
Recent breaches show attackers using AI throughout the entire attack chain—not only to create phishing messages—resulting in faster and more adaptive operations. Security teams should update incident-response playbooks, detection logic, and threat-hunting practices to address AI-assisted campaigns with shorter dwell times.
SC World
What AI Fraud and Deepfake Failure Costs the Business
High-value activities such as wire transfers, payment-detail changes, credential resets, and data-access approvals often rely on a single voice, video, email, or chat message as proof of identity and authority. AI-generated fraud and deepfakes exploit this channel-based trust, highlighting the need for stronger, multistep authorisation and verification processes.