Google's Threat Intelligence Group warns that AI is allowing both criminal and state-sponsored adversaries to automate and scale cyberattacks, significantly increasing their operational reach.
Threat actors are offering a massive database of 153 million driver's licence records for sale on the dark web, heightening identity theft concerns.
Non-human identities like service accounts and AI agents have overtaken phishing as the leading route for attackers to enter enterprises, according to SpyCloud.
Threat actors are using infostealer malware like Lumma and Vidar to harvest session tokens, enabling them to bypass MFA and hijack premium AI services.
The Gigabud Android banking trojan uses cloned work profiles to isolate banking apps, allowing fraudsters to bypass detection and execute transactions on seemingly clean devices.