ai threats4 articles
Spain's Data Watchdog Gets First AI Agent Data Breach Report. Should We Panic?
Spain's data protection authority (AEPD) has reported what appears to be the first known personal data breach carried out by an AI agent, in which an autonomous agent successfully logged in, identified vulnerabilities, modified personal data, and accessed invoices by chaining multiple attack phases together without human direction. The AEPD describes this as a qualitative shift in cyber threats, since AI agents can autonomously plan, adapt, and execute complex attacks at speed. In response, the agency calls for updated risk management practices, faster incident response, stronger credential protection, and AI-assisted defences — while maintaining human oversight throughout.
Paying Ransomware Criminals Doesn't Make Them Go Away. Surprise.
New data from Proofpoint reveals that paying ransomware demands offers no guarantee of safety, with 22% of UK organisations that paid being extorted a second time. Globally, 54% of victim organisations paid ransoms, yet 2% never recovered their files at all, and law enforcement takedowns like Operation Cronos confirmed that criminals routinely retain victim data even after receiving payment. AI is increasingly being used to enhance the phishing and credential-harvesting attacks that precede ransomware, though experts stress that building organisational cyber-resilience remains a far more effective strategy than paying attackers.
An Executive's Inbox Was Silently Plundered for Five Months. Here's What That Tells Us About AI-Assisted Attacks
A stock exchange executive had their Outlook mailbox compromised for five months without anyone noticing. Five months.
Typosquatting Has Outgrown the User Error Excuse
Typosquatting was once seen as a relatively simple phishing threat: a user mistypes a domain, lands on a malicious site, and becomes compromised. That model is now outdated. Modern typosquatting has moved beyond browsers into software package registries, dependency managers, and CI/CD pipelines, making it a software supply chain security issue rather than a user-awareness problem.