Identity compromise is surging, browsers are now prime attack surfaces, and AI risk is showing up in two ways: attackers using AI to scale threats, and attackers targeting AI systems to reach sensitive data.
The biggest shift is not just more threats. It is faster threats. Attackers are moving from stealthy persistence to rapid execution, browser credential theft, cloud identity abuse, and supply chain compromise. Defenders need detection and response models built for minutes, not months.
Most enterprises are dangerously unprepared. There exists a critical readiness gap, with AI adoption far outpacing the enterprise safeguards needed to govern it.
ShadowLeak is a critical zero-click vulnerability that allowed for the exfiltration of sensitive information from ChatGPT when connected to enterprise Gmail, discovered by Radware and now patched by OpenAI.