„Prompt Injection“ ist eine neu aufkommende Bedrohung, bei der bislang nur eine Handvoll Opfer bestätigt wurden – sie zielt darauf ab, die Art und Weise zu manipulieren, wie KI-Systeme Daten nutzen, anstatt herkömmliche Software-Schwachstellen auszunutzen. Da agentische KI zunehmend in Unternehmensumgebungen integriert wird, könnten Angreifer versuchen, diese Systeme durch versteckte Anweisungen in alltäglichen E-Mail-Inhalten zu manipulieren.

AI systems like Mythos are accelerating vulnerability discovery to the point where attackers can exploit weaknesses before they are ever disclosed, undermining the traditional model of CVE-driven defense. Learn how this shift is forcing security teams to move beyond patching and adopt behavioral detection to identify and contain threats before disclosure.

Findings from our annual survey of 1,500+ cyber professionals reveal that security leaders are confronting a surge in AI-driven attacks, which are faster, more personalized, and harder to detect than anything they’ve seen before. As these threats scale, the challenge for defenders is in evolving their security programs in tandem to defend with confidence.

Read how Darktrace AI is revolutionizing email security. Understand the human behavior of email attacks and how to mitigate your team's malware risks.

Learn how autonomous AI frees up IT teams and allows them to focus on what matters. Say goodbye to weighed-down teams and lengthy security processes.

Cyber-criminals target weekends and holidays to strike while employees are away. Discover how defensive AI can protect your business 24/7.

A malicious eScan software update triggered a supply chain compromise that deployed multi‑stage malware and used blockchain‑based domains for resilient C2 communications. Darktrace identified rare, anomalous network activity across customer environments, helping organizations uncover the attack chain and strengthen defenses against increasingly sophisticated supply chain threats.

AI is accelerating cyberattacks beyond the pace of patching, exposing a growing gap between vulnerability discovery and remediation. This blog explores why prevention-first security can no longer keep up with AI-driven threats. It also outlines how Darktrace’s behavioral AI enables organizations to detect and contain attacks instantly even when vulnerabilities are unknown or unpatched.

Darktrace analysis reveals ZionSiphon, an OT‑focused malware targeting Israeli water treatment and desalination systems. The malware combines privilege escalation, persistence, USB propagation, and ICS scanning with sabotage capabilities aimed at chlorine and pressure controls, highlighting growing experimentation with politically motivated critical ‑infrastructure attacks against industrial operational technologies globally.

Da das Model Context Protocol (MCP) zur Steuerungsebene für autonome KI-Agenten wird, entsteht eine neue und weitgehend unregulierte Angriffsfläche für Sicherheitsangriffe. Dieser Artikel beschreibt die wichtigsten MCP-Risiken, die CISOs angehen müssen, und erläutert, warum Governance und Transparenz jetzt unverzichtbar sind.

Chaos malware is increasingly targeting misconfigured cloud deployments, expanding beyond its traditional focus on routers and edge devices. Darktrace’s honeypot networks revealed evolving tactics and new capabilities, highlighting the growing risks to cloud servers.

Darktrace's latest threat research reveals how Chinese-nexus cyber operations have evolved from isolated intrusions into long-term strategic positioning, with attackers prioritizing persistent access to critical infrastructure and digital ecosystems to gain lasting operational and economic advantage.

By combining AI-driven detection and autonomous response, this leading grocery holding group has built a security model that delivers continuous protection, accelerates growth, and empowers a small, highly efficient team to safeguard a complex retail ecosystem.

GhostSocks is an emerging threat turning compromised devices into residential proxy nodes to help attackers evade detection. Darktrace identifies its growing use alongside Lumma Stealer, highlighting the malware’s stealth, payload delivery, and persistence. AI-driven detection and Autonomous Response reveal the full attack lifecycle and underscore the need for proactive defense.

Introducing the adaptive era of email security: a unified platform that connects personalized coaching, collaboration tools, and user behavior into a self-improving defense system.

This Darktrace / OT release introduces new capabilities designed to help industrial organizations better understand, document, and operationalize their operational environments. With native OT architecture visualization, structured asset and compliance reporting, and expanded industrial protocol coverage, this release focuses on improving how teams manage real operational security workflows.

This blog explores how the Darktrace’s ActiveAI Security Portal supports efficient, AI driven triage across customers and Partner deployments

Darktrace is proud to announce that Darktrace / OT has been recognized as the only Visionary in the 2026 Gartner® Magic Quadrant™ for CPS Protection Platforms, marking the second consecutive year Darktrace has held this position.

World Leaks, a rebrand of Hunters International, are known for their extortion-only attack model, abandoning the tactic of file encryption. However, contrary to these claims, Darktrace detected a World Leaks compromise where a ransomware payload was deployed, and customer data was encrypted.

NetSupport RAT is the malicious abuse of the legitimate NetSupport Manager remote administration tool. Originally designed for IT support, threat actors exploit it to gain unauthorized system access, exfiltrate data, and deploy malware or info‑stealers, turning trusted functionality into a dangerous attack vector.