Research2026-10-28

AI agents are enabling faster, larger-scale cyberattacks across industries. Hackers used an AI penetration-testing tool to breach GMO Internet and demand a $50 million ransom. AI agents also uncovered unknown vulnerabilities in PHP, leading to millions of attack attempts. Law firms saw a 39% rise in named entities on hacked material sites, per CrowdStrike. Healthcare providers like UNM Hospital and University Hospitals canceled services due to attacks. DaVita settled a $15 million lawsuit over a 2025 ransomware breach. US lawmakers pressed AI companies on security risks amid regulatory discussions. The White House and AI developers announced a self-regulatory safety framework. Experts recommend prompt updates, software inventories, strong passwords, and breach response plans. AI amplifies risks but does not change core security practices.

  • 455 legal entities named in hacked materials
  • 39% increase in named legal entities from prior year
  • $50 million ransom demanded in GMO Internet breach
  • $15 million settlement for DaVita ransomware attack

Send this to someone who needs it

Shares the story and its sources. Nothing about you.

What does this mean for your job?

This is the story as everyone gets it. Once a week we send you the version written for your role — what changed, why it matters for the work you actually do, and one thing to try. Free while we tune it.