Saturday 7 November
Global

Your region, kept on this device.

Alex Stamos says AI is upending cybersecurity as breaches mount across the industry

Severity
High
Sources
1

Stamos argues that AI-enabled tooling now automates most of the kill chain, finding bugs and writing exploits in real time against targets. He describes a chain in which a Fireworks breach yielded API keys used to access Cursor, after which a malicious plugin reached about 5,000 companies. He says the ARTEX tool, reportedly paired with a modified backend, began with three South Korean banks and has since reached about 200 more companies. No CVE identifiers are given.

For security analysts · Written by AI from 1 source · Wrong?

What to do

  1. Use a unique password for each account and a password manager, as the article's security advice recommends.
  2. Review any third-party plugins and API keys connected to AI services you use, given the chained compromises described.

Written by AI from the sources, checked against them

Full story timeline · 1 update

  1. Sat 7 NovemberAI broke the cybersecurity world. What’s next?The Verge

Who reported · 1 outlet

The Verge

Who and what is in it

Companies

Products

Report a problem