
F-Secure maps 26 ways AI can harm consumers
The taxonomy covers five relationship types and 19 intermediary layers, with 24 defenses at different points.
31 stories, newest first · one card per story

The taxonomy covers five relationship types and 19 intermediary layers, with 24 defenses at different points.

The Decoder interview covers lawsuits, detection and labeling, and whether Spotify and YouTube would participate.

Three men impersonated CEOs and lawyers with AI to trick companies into sending $129 million in wire transfers between 2024 and 2026.

Across 1.2 million campaigns, iOS scripts and messenger phishing rose while cloaking’s share of suspensions fell to about 45%.

He says Instagram does not rank AI creators differently and is requiring AI accounts to label themselves.
Malwarebytes says one in ten respondents report non-consensual AI nudes or threats to publish them.

The roundup cites claimed OpenAI data-access incidents, a LiteLLM supply-chain compromise, and about $800 million in UK AI security funding.

A May 2026 pilot scanned about three million posts; humans judged ten seriously misleading.
Authors report competitive identity transfer at 20 FPS on one RTX 4090, stable on videos up to 10 minutes.
Among 524 participants, model-specific training generally produced larger gains, and accuracy held five months later.
IDGuardian uses adversarial perturbations to stop diffusion models from preserving a person's face in generated images.

Recorded Future details how threat actors abuse jailbroken and legitimate AI tools to scale phishing, deepfake impersonation, and phishing-as-a-service operations.

Pindrop's 2026 Deepfake Readiness Index found 74% of surveyed US security leaders faced suspected deepfake incidents, with a quarter of victims losing over $1m.
Cryptographers present ZK-JPEG, a zero-knowledge proof system verifying a published JPEG was correctly compressed from a signed camera image.

AI 'nudify' apps creating non-consensual nude images operate across 181 sites with 40 million monthly visitors; ESET offers victim prevention and takedown guidance.

Apple introduces Reference Image, hardware-backed verifiable photography on iPhone 18 Pro using sensor signing and Private Cloud Compute to counter AI-generated fakes.

EY's Jeffrey Sallet argues AI-driven deepfakes and impersonation require integrating cybersecurity, physical security, HR and legal functions.

Manhattan DA seized 12 deepfake sites that turned ~1,200 people's photos into non-consensual intimate imagery, the largest such seizure.

Manhattan DA seized 12 domains hosting nonconsensual celebrity deepfake videos depicting about 1,200 victims, the largest such takedown to date.

Deepfake pornography sites have targeted nearly 150 European politicians, overwhelmingly women MPs, per new research on 160 abusive domains.

Bitdefender reports deceptive Google Play Early Access apps use deepfake celebrity ads and fake rewards to lure users into ad-fraud schemes.

Apple launched Reference Image, cryptographically signing iPhone 18 Pro photos via Private Cloud Compute to prove image authenticity.
Ohio man James Strahler gets the first US Take It Down Act sentence: 15 years for distributing real and AI-generated abuse imagery.
DF26 benchmark shows humans and state-of-the-art deepfake detectors perform near chance on videos generated by seven modern text-to-video models.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views