
Recorded Future says AI mostly accelerates familiar cyberattacks
Of 103 incidents, 32 used AI in malware or operations, including one Taiwan campaign with up to eight agents.
35 stories, newest first · one card per story

Of 103 incidents, 32 used AI in malware or operations, including one Taiwan campaign with up to eight agents.

Insikt Group notes 52 Very Critical Risk Scores and CISA KEV coverage for 36 vulnerabilities among 82 high-impact CVEs.

Mandiant and CrowdStrike place second and third; Kaspersky is flagged as jurisdiction-gated for Western buyers.

The unpaid comparison maps each provider to the question it answers best and flags Kaspersky for US and allied procurement bans.

The unpaid review judges platforms on operationalization and flags Mastercard and Securonix ownership as RFP questions.

Editorial scores, not lab tests, place Anomali second and open-source OpenCTI third.

Open directories showed crypto, Linux and mobile tooling; cited breaches cover at least 68,000 people.

TAG-217 used the ARTEX AI framework in attacks that exposed data on 68,000 people at South Korean banks.

Recorded Future says 80 vulnerabilities were actively exploited in September 2026, including NetScaler zero-days.

Recorded Future explains malware IoCs for detection and why they decay without context.

Recorded Future launched indicator lists so security teams can monitor and control AI infrastructure traffic.

Recorded Future debuted an autonomous defense platform that acts on threat intelligence at machine speed.

Recorded Future made its MCP generally available so AI agents can query its threat intelligence.

Recorded Future says threat intelligence can flag ransomware access and infrastructure before files are encrypted.

Recorded Future launches Malicious Site Monitoring in Digital Risk Protection, showcasing ClickFix brand-impersonation detection with AI triage.

Recorded Future argues AI agents need trusted threat intelligence to make better security decisions.

Recorded Future says Forrester named it a Leader in the Q3 2026 External Threat Intelligence Service Providers Wave, highlighting PIR support and collection breadth.

Pentera argues threat intelligence alone leaves a validation gap, promoting threat-led penetration testing that auto-tests leaked credentials against real attack surfaces.

Recorded Future publishes a vendor explainer on proactive threat intelligence, arguing external adversary context helps teams act before alerts fire.

Recorded Future argues cybersecurity AI agents perform better when reasoning over structured, curated intelligence graphs rather than fragmented alerts or open-source noise.

Recorded Future launched Digital Risk Protection, unifying brand and identity monitoring across five external threat surfaces in one workflow.

Recorded Future launched Automated Signature Creation in ASI, turning new CVEs into deployable detection signatures in as little as 31 minutes.

Recorded Future reports its Autonomous Threat Operations platform enabled 15-20 weekly automated threat hunts in its own SOC.

Recorded Future's H1 2026 report finds 215 actively exploited CVEs, RAT dominance, NFC payment fraud, and AI-augmented but not autonomous tradecraft.
Today 1.5K readers · 2.4K views · 754 reads · all time 189K views