< Back to situations

Monitor this situation.

[SITUATION] · [QUIET] · [TECHNOLOGY]

2 clusters · 2 sources · 22 days · First seen · Last updated

Cybersecurity threats: weak passwords and AI phishing

Overview

In early July, UK firms were advised to revamp email signature practices as cyber threats intensified, highlighting the need for more robust defensive measures. By the end of the month, global analyses revealed that simple, numeric passwords—most notably “123456”—remain the most widely used credentials across demographics, accounting for a significant share of the top 1,000 passwords and contributing to roughly 70 % of corporate data‑breach incidents. Concurrently, phishing tactics have evolved: a large proportion of campaigns now employ AI‑generated “AiTM” kits that hijack active sessions and bypass multi‑factor authentication without leaving traditional malware traces. Together, these findings underscore the persistence of basic password weaknesses and the rapid adoption of AI‑driven phishing methods in the broader cybersecurity landscape.

Entities

Verizon · NordPass · Any.run · Comparitech · ESET Latinoamérica

Timeline

  1. 21 days ago

    [TECHNOLOGY] 2 sources
    Global Cybersecurity Threats Persist: Weak Passwords and AI‑Generated Phishing

    Weak passwords like “123456” stay globally dominant, driving 70 % of corporate breaches, while AI‑powered phishing campaigns now bypass malware, hijack sessions and evade MFA.

  2. about 1 month ago

    [TECHNOLOGY] 2 sources
    UK firms urged to overhaul email signatures amid rising cyber threats

    UK firms should audit email signatures for compliance while modern AI‑driven phishing exposes the limits of traditional email security, prompting a shift to continuous, behaviour‑based defenses.

Sources

fayerwayer.com · redeszone.net