Hackers are increasingly using artificial intelligence to detect software vulnerabilities, reducing the time organisations have to respond to cyber threats, Verizon said in its annual data breach report.
The company said exploitation of software flaws has overtaken stolen credentials as the most common starting point for breaches for the first time. In a review of more than 31,000 incidents, Verizon found that 31 per cent of breaches began with vulnerability exploitation. The report said “AI is fundamentally reshaping the cybersecurity industry.”
According to Verizon, intruders are using generative AI across several stages of attacks, including targeting, initial access, and the development of malware and other tools. The report said AI is being used by threat actors “to accelerate the time to exploit known vulnerabilities, shrinking the window for defence from months to mere hours.”
The findings add to a series of recent warnings about the role of AI in cyber incidents. CrowdStrike said in its annual global threat report earlier this year that in 2025, “AI-enabled adversaries increased attacks by 89 per cent year-over-year.” It said the technology had strengthened less sophisticated threat actors while amplifying the capabilities of more advanced groups.
Verizon also said the use of shadow AI, or unauthorised AI tools, has become the third most common non-malicious insider action linked to data loss incidents. The report said employees are submitting source code, images and other structured data into such systems, creating new risks for organisations already facing faster external attacks.
Verizon said AI’s main impact is currently operational, automating and scaling techniques that defenders already know how to detect, rather than creating entirely new attack methods. However, the company warned that this assessment could quickly become outdated as AI advances.
The report does not include data from Mythos, a new AI model that has raised cybersecurity concerns. Mythos was announced on 7 April and is being deployed through Anthropic’s “Project Glasswing”, a controlled initiative allowing selected organisations, including Verizon, to use the unreleased Claude Mythos Preview model for defensive cybersecurity purposes.
Experts say Mythos’ advanced coding capabilities could give it an unprecedented ability to identify cybersecurity vulnerabilities and develop ways to exploit them.
Verizon chief information security officer Nasrin Rezai told Reuters that addressing the growing threat is critical. “We need to fight AI with AI. We need to incorporate them into our practices,” Rezai said. “We need to bring them into our software development life cycle, in our testing processes, in our cyber defence processes at a scale that we have never done before.”
Yemen's Houthis renewed warning to airlines, airport workers, and travellers against using Saudi airports, say...
Ukraine is ready to stop attacks on Russian oil refineries if Moscow also halts strikes on Ukrainian energy infrastructure, President Volodymyr Zel...
The 25th World Petroleum Council (WPC) Energy Congress opened in Riyadh on Sunday (11 October), running from 11 to 15 October under the theme &ldqu...
The explosion at King Khalid International Airport in Riyadh on Saturday afternoon killed at least 12 people and injured a further 309, according to Saudi Arabia’s Civil Aviation Authority. The airport remains closed until further notice.
Russian President Vladimir Putin expressed surprise after Donald Trump mediated the Armenia-Azerbaijan peace agreement in 2025, the U.S. President said at a rally in New York state on Friday.
The United Nations has condemned a sharp rise in attacks on civilians in Ukraine, reporting that more than 100 people were killed and at least 429 injured in a single week as Russian strikes hit residential areas, passenger buses and critical infrastructure.
The U.S. has imposed sanctions on the International Criminal Court (ICC) on Friday (9 October) escalating tensions with European allies and potentially targeting companies that provide services to the tribunal. The move came hours after former ICC judge Navi Pillay won the Nobel Peace Prize.
Yemen's Houthis renewed warning to airlines, airport workers, and travellers against using Saudi airports, saying the warning should be taken seriously and that the kingdom “bore responsibility for failed interceptions”, a day after an attack on Riyadh's international airport that killed 12 people.
Anthropic has announced that it is updating its usage policy to allow its AI agents to end conversations involving repeated abuse or cruel behaviour towards them, citing previous incidents.
Türkiye has banned children under 15 from using social media under new regulations published on Saturday. The new regulations prohibit firms from providing services to children “who have not reached the age of 15.”
Microsoft has introduced new tools to stop AI agents from accessing data without permission, alongside a Nvidia-powered Surface laptop that can run advanced AI directly on the device.
Picture three scenarios: a hospital that can spot a disease before the patient feels sick, a power grid that feeds thousands of data centres and a government network that is attacked daily. All three depend on artificial intelligence, and one question matters most: who is really in charge?
OpenAI and Anthropic told Australian parliament on Tuesday they would welcome laws requiring them to report data breaches carried out by their AI agents, acknowledging the decision to notify authorities was currently at their discretion.
You can download the AnewZ application from Play Store and the App Store.
What is your opinion on this topic?
Leave the first comment