
CyberCom 2.0 and the Revolution in AI-Enabled Offensive Cyber Operations
Horizon3.ai whitepaper argues AI now automates most of the offensive cyber kill chain and reshapes US Cyber Command's CYBERCOM 2.0 talent model.
10 stories, newest first · one card per story

Horizon3.ai whitepaper argues AI now automates most of the offensive cyber kill chain and reshapes US Cyber Command's CYBERCOM 2.0 talent model.
Anthropic report reveals Yemen-based actors used Claude Code to build guidance software for guided rockets and ballistic missiles.

Dark Reading reports AI-driven 'swarm' attacks like the PaperCut incident now span recon, lateral movement and exfiltration, forcing a rethink of the cyber kill chain.

Google GTIG reports threat actors using agentic AI to automate reconnaissance, exploit selection, and credential harvesting, compromising thousands of secrets.
Dark Reading reports two ClickFix social engineering campaigns abusing legitimate services to compromise organizations and maintain persistent access.

GTIG's Q2 2026 tracker shows adversaries adopting agentic AI workflows, including credential harvesting in under six hours and supply chain attacks by UNC6780.
Huntress explains how threat actors abuse trusted AI platforms as an attack surface for malware delivery and data theft.
Huntress reports RMM tool abuse jumped 277% and now appears in nearly 40% of its investigations as attackers leverage trusted remote access software.
Red Canary's August 2026 Intelligence Insights report covers new threat actor debuts, departures, and threats targeting the blockchain sector.

Recorded Future's Insikt Group profiles 24 threat actors selling malware crypting services and urges defenders to favor behavioral detection over static analysis.
Today 1.6K readers · 2.5K views · 779 reads · all time 189K views