ESET WeLiveSecurity published a guidance article on 'nudify' apps, which use generative AI to turn images of clothed people into synthetic nude images. The resulting non-consensual intimate imagery (NCII) is used by fraudsters, bullies and cybercriminals, including for blackmail. An Institute for Strategic Dialogue (ISD) and AI Security I…
The UK Electoral Commission is developing an AI-powered system to alert candidates and parties to significant deepfakes within three hours of first posting. Chief executive Vijay Rangarajan announced the plan at the Conservative Party conference and cited a deepfake of Irish presidential candidate Catherine Connolly during Ireland's 2025 …
Flare research, published as sponsored content, describes how underground forums package services that defeat Know Your Client (KYC) identity checks. Offerings include forged identity and financial documents, manipulated photos and AI-generated videos, live deepfake tools, and accounts advertised as already verified. The article cites the…
The FBI warns that scammers are likely to exploit the 2026 US Midterm Election to run financial fraud schemes against victims across the United States. The PSA updates alert I-102924-PSA from 29 October 2024. Scammers use candidates' names, images, logos and slogans to solicit fake campaign contributions, sell merchandise that is never de…
The FBI and CISA issued a joint Public Service Announcement warning that malicious cyber actors may use phishing and smishing against election officials, candidates and political organizations ahead of the 2026 U.S. midterm elections. These targets are attractive because of their access to voter registration data, current government offic…
Trend Micro published a report, Deepfake it 'til You Make It: A Comprehensive View of the New AI Criminal Toolset, describing how cybercriminals use inexpensive, off-the-shelf generative AI platforms to produce deepfake video, audio and images. Many of these platforms are marketed to content creators. Observed abuse includes CEO fraud wit…
Trend Micro published its Security Predictions Report for 2026, titled The AI-fication of Cyberthreats, forecasting that AI and automation will let threat actors run entire campaigns autonomously, from reconnaissance to extortion. This is a forward-looking vendor assessment, not a report of a specific incident, and it names no actors, CVE…
AI voice-cloning scams are now cheap and convincing, and a Hiya report from March says one in four Americans received a deepfake voice call in the past 12 months. A further 24% say they cannot tell a cloned voice from a real one. The article describes virtual kidnapping scams, in which attackers clone a relative's voice from a few seconds…
This WeLiveSecurity explainer gives practical advice to people targeted by AI-generated deepfakes, which are increasingly used in fraud, extortion, harassment and non-consensual intimate imagery (NCII). It sets out the legal context: the US TAKE IT DOWN Act criminalizes NCII distribution and requires platforms to remove reported content w…
Trend Micro published its 2025 security predictions report, The Easy Way In/Out: Securing The Artificial Future, warning that highly customized, AI-powered attacks will supercharge scams, phishing and influence operations in 2025 and beyond. The central prediction is the emergence of malicious "digital twins": breached or leaked PII used …
Trend Micro released its 2026 Consumer Security Predictions Report on December 3, 2025. It warns that scams will reach unprecedented scale as fraudsters combine automation, AI-generated personas, voice cloning and deepfake media with emotional manipulation. The report expects multi-channel scam journeys to become the dominant pattern in 2…
ESET analysis describes how modern phishing and social engineering have shed the classic tells (poor grammar, suspicious URLs, crude login pages) and increasingly target live sessions and authentication tokens rather than passwords. Cybercrime-as-a-service phishing kits and AI tooling lower the cost of tailored, rapport-building lures. Ac…
Huntress published an explainer on business email compromise (BEC), a targeted form of phishing in which attackers impersonate or take over trusted email accounts to redirect payments or steal credentials. The article cites roughly $55 billion in worldwide losses and a Huntress survey of 500+ US IT professionals, in which 36% of organizat…
ESET's WeLiveSecurity warns that AI and large language models (LLMs) now automate OSINT reconnaissance at machine speed. Profiling that once took a skilled attacker hours or days can be done by low-skill actors, so ordinary internet users are now economically viable fraud targets. Fraudsters can collect public information at scale, includ…