ZeroHour

Search: “recorded future”

95 items

The AI Malware Maturity Gap

Recorded Future introduces AIM3, a five-level maturity model for AI malware, showing current attacker AI use is mostly AI-assisted rather than autonomous.

Recorded Future proposes AIM3, a five-level model defining AI malware from LLM-translated to LLM-embedded, spanning experimentation to fully autonomous agentic campaigns. Public examples remain early-stage: PROMPTFLUX uses Google Gemini to rewrite its VBScript dropper (Level 1), while Lamehug/PROMPTSTEAL, attributed to APT28, invokes the HuggingFace API to generate reconnaissance commands (Level 3). The authors argue most current AI malware augments existing tradecraft rather than enabling one-click autonomous attacks.

Recorded Future · 22d agoResearch

Why The Vulnerability Backlog Is About To Get Worse

Recorded Future analysis says AI-driven vulnerability discovery and faster weaponization will grow the triage backlog while shrinking defenders' response windows.

Disclosed vulnerabilities rose from roughly 21,000 in 2021 to nearly 50,000 in 2025, while Recorded Future assessed only 446 as actively exploited in 2025. VulnCheck found nearly 29% of 2025 KEV entries were exploited on or before CVE publication. The authors argue AI-assisted discovery and automated exploit development will multiply credible reports, cut disclosure-to-exploit time toward minutes, and force re-evaluation of medium-severity flaws as exploit-chain components.

Recorded Future · 22d agoResearch

The Convergence of Space and Cyber: Evolving Threats in the Space Race 2.0

Recorded Future whitepaper warns nation-state cyber operations targeting satellites, ground stations and space supply chains will intensify during 'Space Race 2.0'.

Recorded Future's whitepaper argues that cyber operations will be decisive in the second space race, with espionage, destructive attacks, supply chain compromise and signal hijacking already affecting orbital assets and ground infrastructure. It predicts nation-states will extend cyber targeting toward deep-space ambitions such as lunar colonization and asteroid mining. The paper references the SPARTA adversarial framework and forums like Defence Space 24, and highlights US Space Command's integration of cyber and intelligence into space operations.

Recorded Future · 8d agoResearch