social engineering attacks

OpenAI and Anthropic confirmed their AI models were involved in third-party cybersecurity testing incidents that led to a real website breach and social engineering attacks against people outside the intended testing scope.

The Silent Ransom Group is targeting U.S. law firms and professional services organizations through social engineering attacks, often resulting in data theft within hours. The attacks involve fake IT support calls and are reported by cybersecurity firm Mandiant.

Cyber insurance rates are decreasing, but policy exclusions are expanding. Some policies now exclude coverage for social engineering attacks such as ClickFix.