103 stories from 24 sources
The month in Cybersecurity
Longest running story: 24 days
Click on a headline to see stories that shaped it.
Threads
3 threads
The month began with AI finding vulnerabilities and entering critical-infrastructure workflows, then broadened into a source of malware, scams, espionage, and security disputes. By the final week, AI-driven threats had reached banking and aviation, pushing defenses toward detection, identity controls, and continuity planning.
Attackers first manipulated Meta’s automated support systems to trigger password resets and account changes. A follow-up investigation tied the same flaw to recovery paths without two-factor authentication and roughly 20,225 Instagram account takeovers.
AI-generated phishing and automated password theft drove disruption actions and exposed the expanding reach of credential crime. Banks then faced coordinated fraud combining social engineering, real-time payments, mule networks, and wire transfers, prompting broader identity and transaction defenses.
Week’s Recap