AI-powered cyberattacks fuel 'Black October' fears

A growing wave of AI-assisted hacking is driving cybersecurity professionals to refer to the current period as “Black October.” The concern is largely about speed: AI tools can automate parts of penetration testing and enable attackers to probe multiple targets continuously, leaving defenders less time to respond. One example cited by Microsoft Threat Intelligence involves Storm-0940, a China-state-aligned group, using an AI-powered open-source framework called ARTEX to automate security testing tasks. Researchers also report serious weaknesses in widely used software that could affect millions of websites. The stakes extend beyond large organizations—personal accounts can be hit after credentials are stolen.