PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

AI is the new magical master key: How attackers are using AI as a tool

bugcrowd.com | research | #ai-security | #threat-intelligence | #malware | #osint | #phishing | #social-engineering | #threat-landscape | #deepfake | #ai-attacks
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

The author details how attackers wield AI: deepfake-enabled fraud, ML-based defensive evasion, and automated reconnaissance, noting 80% of CISOs now rank AI-powered attacks as their top concern.
Published
Collected

Related coverage

research · volexity.com
Dangerous Invitations: Russian Threat Actor Spoofs European Security Events in Targeted Phishing Attacks
# Dangerous Invitations: Russian Threat Actor Spoofs European Security Events in Targeted Phishing Attacks December 4, 2025 Matthew Meltzer, Steven Adair, and Tom Lancaster In early 2025, Volexity...
research · volexity.com
OceanLotus: Extending Cyber Espionage Operations Through Fake Websites
Since Volexity’s 2017 discovery that OceanLotus was behind a sophisticated massive digital surveillance campaign, the threat group has continued to evolve. In 2019, Volexity gave a presentation at RSA Conference […]
research · volexity.com
Sophisticated Phishing Campaign Targets Corporate Credentials
Volexity has been tracking a series of phishing campaigns focused on harvesting Microsoft Office 365 account credentials. While many commodity phishing kits are available to purchase containing Office 365 themes, […]
research · volexity.com
PowerDuke: Widespread Post-Election Spear Phishing Campaigns Targeting Think Tanks and NGOs
In the wake of the 2016 United States Presidential Election, not even six hours after Donald Trump became the nation’s President-Elect, an advanced persistent threat (APT) group launched a series […]
vulnerability · volexity.com
Mind the (Patch) Gap: Multiple Chinese Threat Actors Chain 0-day Exploits in Chrome & Windows
On September 1, 2026, Volexity’s Network Security Monitoring service detected a spear-phishing campaign from a Chinese threat actor it tracks as UTA0560 targeting customers at multiple non-governmental organizations (NGOs). The emails contained a message encouraging the users to a click a link that led to the website of a US-based university. These links abused a reflected cross-site scripting (XSS) vulnerability on the website, redirecting recipients to threat-actor-controlled infrastructure hosting a multi-stage exploit chain that included a Google Chrome zero-day, CVE-2026-85046. Volexity analyzed its email telemetry and discovered that another Chinese threat actor it tracks as JungleBamboo (also known as APT31/Violet Typhoon/TA412) was also exploiting the same vulnerability chain against a different set of targets using different infrastructure and post-exploitation malware.
blog · netspi.com
The Rapid Evolution of AI Voice Cloning and its Implications for Cybersecurity
Modern AI voice cloning needs only a minute or two of audio to produce realistic replicas. The article examines real-time impersonation risks, NetSPI's cloner testing tool, and mitigations.
Back