Google’s Threat Intelligence Group observed PROMPTFLUX using an AI model to generate a new version of itself every hour, showing how adaptive malware can evade legacy SIEM detection. AI-driven attacks are increasing as threat actors use automation to rewrite malware and phishing on the fly, making behavior-based detection more effective than signature-based approaches. #PROMPTFLUX #GoogleThreatIntelligenceGroup #IBMXForce #Kaseya
Keypoints
- PROMPTFLUX changes its code every hour by querying an AI model.
- Legacy SIEM tools struggle because they rely on known signatures and rules.
- IBM found attackers are using AI to speed up reconnaissance and rewrite lures.
- Behavior-based AI-native SIEM can detect unusual activity even for unknown attacks.
- AI and automation reduce breach response time and help cut breach costs.
Read More: https://thehackernews.com/expert-insights/2026/08/how-ai-assisted-attacks-are-breaking.html