
How AI is changing the anatomy of modern cyber threats
Brandi ReedMachine learning makes old attacks faster, cheaper and more convincing. The defenses have not changed as much as you might hope.
Active intrusion campaigns explained by method.

Machine learning makes old attacks faster, cheaper and more convincing. The defenses have not changed as much as you might hope.

Threats come in a handful of distinct types. Sorting them helps you pick the right defense instead of guessing.

Intruders increasingly skip malware and drive Windows' own PowerShell, WMI and RDP. Here is why that evades antivirus and which logs catch it.

A quiet corner of the criminal economy supplies ransomware crews with ready-made footholds. Here is how the trade works, and how defenders shrink it.

Credential stuffing is the automated replay of username-password pairs from past breaches against login pages, and it works because people reuse passwords — 1 in 5 breached credentials eventually appears in a later stuffing run, per Google's 2019 study of 1.4 billion credentials.

CVE-2026-18577 let attackers seize admin control of N-central servers and reach managed endpoints through the platform's Take Control feature; N-able's second hotfix, released Aug. 6, is the only complete fix.