📅 Weekly Security Briefing — Mar 16–22, 2026

📉 The $2.77 Exploit: AI Slashes Cost of Weaponizing Vulnerabilities

What happened: A new report from Booz Allen reveals that the cost to automatically generate working exploits for CVEs has dropped to as little as $2.77 using AI tools. At the same time, nearly 60% of critical vulnerabilities remain unpatched past CISA deadlines, highlighting a widening gap between attacker speed and defender response.

🔗 https://industrialcyber.co/article/booz-allen-warns-ai-driven-cyberattacks-outpace-human-driven-defenses/

🤖 HiddenLayer Report Highlights Rise of Agentic AI Breaches

What happened: The 2026 AI Threat Landscape Report shows that 1 in 8 AI-related security incidents now involve agentic systems. The report also found that 35% of AI breaches originate from malicious models in public repositories, while shadow AI usage has reached 76% across enterprises, significantly expanding the attack surface.

🔗 https://businessjournaldaily.com/ai-security-company-releases-2026-threat-report/

🎭 ‘InstallFix’ Campaign Uses Fake Docs to Deliver Infostealers

What happened: A new social engineering campaign dubbed InstallFix targets developers by cloning legitimate documentation (including AI tooling docs) and embedding malicious installation commands. Victims unknowingly execute scripts that deploy the Amatera infostealer, capable of harvesting credentials, session tokens, and browser data.

🔗 https://pushsecurity.com/blog/installfix

🆔 SpyCloud Report: Machine Identities Become Primary Target

What happened: SpyCloud’s latest research shows a major shift from human credentials to non-human identities (NHIs) such as API keys and session tokens. Stolen identity records increased significantly, with attackers using these composite identity profiles to bypass MFA and move laterally across cloud environments.

🔗 https://devops.com/spyclouds-2026-identity-exposure-report-reveals-explosion-of-non-human-identity-theft/

🌍 Interpol Dismantles 45,000 Malicious IPs in Global Operation

What happened: INTERPOL announced a major international takedown involving 45,000 malicious IP addresses and servers across 72 countries, disrupting phishing, malware, and ransomware infrastructure. The operation led to 94 arrests and the seizure of hundreds of systems linked to global cybercrime networks.

🔗 https://cybersecurity-review.com/news-march-2026/interpol-45000-malicious-ip-addresses-taken-down/

💬 Wrap-Up

This week reinforces a major shift in the threat landscape: AI is dramatically lowering the cost of attack while increasing speed and scale. At the same time, identity is evolving — from passwords to tokens, APIs and machine identities — creating new blind spots for defenders.

0 comments

AI Security & Automation

skool.com/cloud-ai-security-academy-4626

Learn AI, automation and security tools reshaping modern SOC and cyber careers.

Bring people together around your passion and get paid.