Hackers are increasingly using artificial intelligence to detect software vulnerabilities, reducing the time organisations have to respond to cyber threats, Verizon said in its annual data breach report.
The company said exploitation of software flaws has overtaken stolen credentials as the most common starting point for breaches for the first time. In a review of more than 31,000 incidents, Verizon found that 31 per cent of breaches began with vulnerability exploitation. The report said “AI is fundamentally reshaping the cybersecurity industry.”
According to Verizon, intruders are using generative AI across several stages of attacks, including targeting, initial access, and the development of malware and other tools. The report said AI is being used by threat actors “to accelerate the time to exploit known vulnerabilities, shrinking the window for defence from months to mere hours.”
The findings add to a series of recent warnings about the role of AI in cyber incidents. CrowdStrike said in its annual global threat report earlier this year that in 2025, “AI-enabled adversaries increased attacks by 89 per cent year-over-year.” It said the technology had strengthened less sophisticated threat actors while amplifying the capabilities of more advanced groups.
Verizon also said the use of shadow AI, or unauthorised AI tools, has become the third most common non-malicious insider action linked to data loss incidents. The report said employees are submitting source code, images and other structured data into such systems, creating new risks for organisations already facing faster external attacks.
Verizon said AI’s main impact is currently operational, automating and scaling techniques that defenders already know how to detect, rather than creating entirely new attack methods. However, the company warned that this assessment could quickly become outdated as AI advances.
The report does not include data from Mythos, a new AI model that has raised cybersecurity concerns. Mythos was announced on 7 April and is being deployed through Anthropic’s “Project Glasswing”, a controlled initiative allowing selected organisations, including Verizon, to use the unreleased Claude Mythos Preview model for defensive cybersecurity purposes.
Experts say Mythos’ advanced coding capabilities could give it an unprecedented ability to identify cybersecurity vulnerabilities and develop ways to exploit them.
Verizon chief information security officer Nasrin Rezai told Reuters that addressing the growing threat is critical. “We need to fight AI with AI. We need to incorporate them into our practices,” Rezai said. “We need to bring them into our software development life cycle, in our testing processes, in our cyber defence processes at a scale that we have never done before.”
Kazakhstan and Germany have agreed to expand cooperation in critical minerals, industry, energy and transport, with Astana seeking a greater German...
Global cholera deaths reached their highest annual level in more than 20 years in 2025, despite a decline in reported cases, according to the World...
Russian state nuclear corporation Rosatom has proposed building a new 1,000-megawatt nuclear power unit in Armenia as Yerevan weighs competing inte...
A Russian guided aerial bomb has struck an apartment building in Kharkiv, injuring 22 people, including children, according to the city’s mayor. The strike follows a day of near-continuous Russian attacks across Ukraine that killed at least five people.
Here's your AnewZ Daily Brief for 28 September 2026. These are the top stories making headlines in technology.
Saudi Foreign Minister Prince Faisal bin Farhan has arrived in Washington for talks with U.S. Secretary of State Marco Rubio on bilateral ties and key regional and international developments, Saudi state news agency SPA reported.
The European Union's decision to simultaneously advance accession talks with Ukraine, Moldova, Montenegro and Albania marks its most ambitious enlargement effort in more than two decades.
U.S. President Donald Trump has denied reports that he offered Iran sanctions relief and access to frozen funds in exchange for nuclear concessions.
OpenAI has cancelled plans to release GPT-6.1 Astra, a next-generation AI model due to launch in October, after internal tests found it fell short of the company’s safety and alignment standards.
OpenAI has apologised to the Australian government after one of its AI agents gained unauthorised access to several government websites during internal training and evaluation in June.
Robots capable of interacting with people, navigating their surroundings autonomously, supporting manufacturing and logistics operations, and providing services at large-scale facilities will be showcased at AI & Digital Bridge 2026 in Astana from 1 to 3 October.
Here's your AnewZ Daily Brief for 28 September 2026. These are the top stories making headlines in technology.
Meta has unveiled a new generation of wearables, including lightweight virtual reality glasses and camera-free smart spectacles, as it pushes AI-powered devices further into the mainstream while seeking to address privacy concerns.
You can download the AnewZ application from Play Store and the App Store.
What is your opinion on this topic?
Leave the first comment