Attackers use AI to intensify cyberattacks and outpace patches
Updated
Updated · The Hacker News · May 4
Attackers use AI to intensify cyberattacks and outpace patches
14 articles · Updated · The Hacker News · May 4
In 2025, malicious packages rose 75% to 454,600, cloud intrusions 35%, and 28.3% of CVEs were exploited within 24 hours of disclosure.
Cases included a 17-year-old in Osaka accused of stealing 7 million Kaikatsu Club records and non-technical teenagers using ChatGPT to hammer Rakuten Mobile about 220,000 times.
Time to exploit fell from more than 700 days in 2020 to 44 days in 2025, while average remediation took 74 days, leaving defenders struggling as AI-generated malware evaded detection.
As AI infects the software supply chain, how can developers trust code they didn't write?
With teenagers becoming super-hackers, should AI creators be held liable for crimes using their tech?
Will defensive AI ever catch up, or are AI-powered attacks now permanently one step ahead?
AI-Driven Cyberattacks Surge 79% in 2025: The Urgent Need for Machine-Speed Defense
Overview
Between 2025 and 2026, cyber threats escalated dramatically as threat actors weaponized AI, leading to a surge in sophisticated attacks like AI-generated phishing, credential theft, and ransomware targeting cloud environments. AI automation accelerated attacks, collapsing the time defenders have to patch vulnerabilities, while legacy systems and organizational delays worsened defenses. In response, cybersecurity shifted to operate at machine speed, with AI transforming security operations through automation and smarter threat detection, fostering a human-AI partnership. Meanwhile, nation-state and criminal groups increasingly collaborate, blurring lines and amplifying risks. Emerging challenges include AI behavior manipulation, autonomous attacks, and quantum threats, demanding robust AI governance, improved workforce skills, and strategic policy overhauls to build resilient defenses.