{"id":25301,"date":"2026-08-19T17:53:51","date_gmt":"2026-08-19T17:53:51","guid":{"rendered":"https:\/\/insurance-canada.ca\/?p=86489"},"modified":"2026-08-19T17:53:51","modified_gmt":"2026-08-19T17:53:51","slug":"ai-drives-surge-in-disclosed-vulnerabilities-yet-two-thirds-of-ransomware-deployments-still-start-with-compromised-credentials","status":"publish","type":"post","link":"https:\/\/blog.lifeinsurance-orleans.ca\/index.php\/2026\/08\/19\/ai-drives-surge-in-disclosed-vulnerabilities-yet-two-thirds-of-ransomware-deployments-still-start-with-compromised-credentials\/","title":{"rendered":"AI drives surge in disclosed vulnerabilities, yet two-thirds of ransomware deployments still start with compromised credentials"},"content":{"rendered":"<h3>Beazley Security\u2019s Q2 2026 Quarterly Threat Report finds agentic AI reshaping vulnerability research far faster than it is changing how attackers break in<\/h3>\n<ul>\n<li><em><strong>Disclosed vulnerabilities increased 36% in Q2, while confirmed exploitations in the wild only grew 10%<\/strong><\/em><\/li>\n<li><em><strong>Compromised credentials remained the leading initial access vector, accounting for 67% of ransomware intrusions investigated by Beazley Security<\/strong><\/em><\/li>\n<li><em><strong>Beazley Security Labs issued 40% more critical zero-day advisories to clients than in the previous quarter<\/strong><\/em><\/li>\n<\/ul>\n<p>West Hartford, CT (Aug. 18, 2026) \u2013 Beazley Security has&nbsp;released its Quarterly Threat Report for Q2 2026, finding that the widespread adoption of agentic AI in vulnerability research drove a 36% quarter-over-quarter increase in newly disclosed vulnerabilities while the methods attackers used to breach organizations remained almost entirely unchanged.<\/p>\n<p>Vulnerabilities confirmed as actively exploited and added to the Cybersecurity and Infrastructure Security Agency\u2019s (CISA) Known Exploited Vulnerabilities catalog rose only 10% over the same period, a gap that further amplifies an already difficult prioritization challenge facing security teams.<\/p>\n<h4>AI reshapes vulnerability research faster than exploitation<\/h4>\n<p>Disclosure volume has historically moved within a 10% band from quarter to quarter. That pattern broke in 2026, rising 18.5% in Q1 and another 36% in Q2. Beazley Security Labs (BSL) attributes the surge to the rapid operationalization of agentic AI across research programs. The strain of the higher volumes is visible industry-wide: NIST no longer enriches every new CVE; HackerOne\u2019s Internet Bug Bounty paused submissions citing AI-assisted research; Pwn2Own issued applicant rejections for the first time; and Cisco restructured its disclosure model outright.<\/p>\n<h4>Attackers experiment with AI, but still succeed with credentials<\/h4>\n<p>Threat group TeamPCP compromised the TanStack developer package suite in an incident that produced more than 500 million downloads of infected packages within hours, then published its worm\u2019s vibe coded source code on a criminal forum alongside a cash-prize competition for the most damaging supply chain compromise. Sysdig separately documented JADEPUFFER, assessed as the first ransomware campaign driven end to end by a large language model.<\/p>\n<p>While dramatic, these headlines did not change how most intrusions actually started. Compromised credentials used against internet-facing VPN and remote desktop services accounted for 67% of ransomware intrusions investigated by Beazley Security. This is down from 74% in Q1 but is still dominant by a wide margin.<\/p>\n<p>Law enforcement efforts to disrupt infostealer families have had success but are proving to be short-lived. Within four days of an Operation ENDGAME takedown, StealC malware authors shipped a new version of the malware and offered the previous source code for $60,000. Public ransomware leak-site postings fell slightly to 2,268 but remained nearly 60% above Q2 2025.<\/p>\n<h4>Identity attacks evolve past multifactor authentication<\/h4>\n<p>Business email compromise (BEC) remained among the most common incident types, with attackers increasingly abusing Microsoft\u2019s device code authentication flow to capture session tokens. Because the victim completes a legitimate sign-in and satisfies any organizational MFA requirement, the attacker never needs to intercept a code.<\/p>\n<p>\u201cThe headline this quarter is that AI made the security industry\u2019s job noisier without making the attacker\u2019s job fundamentally different,\u201d said Alton Kizziah, CEO of Beazley Security. \u201cBut AI assisted attacks are gaining in both frequency and effectiveness, and we seem to be watching the attackers learn in real time. As AI adoption in the enterprise increases, and as attackers continue to evolve tactics, clients need to remain vigilant and attend to cybersecurity basics. We also recommend organizations consider AI assessments to monitor what AI capabilities are in use across the organization, how these tools are being used, and what is needed to improve management and control frameworks.\u201d<\/p>\n<p>Access the full <a href=\"https:\/\/beazley.security\/insights\/quarterly-threat-report-second-quarter-2026\" target=\"_blank\" rel=\"nofollow noopener noreferrer\"><strong>Q2 2026 Quarterly Threat Report<\/strong><\/a>.<\/p>\n<h4 class=\"smallhead\"><b>About the Quarterly Threat Report<\/b><\/h4>\n<p>Beazley Security Labs synthesizes global threat intelligence, incident response data and MDR telemetry to identify trends shaping the cyber risk landscape. The Q2 2026 Threat Report covers all of the above, along with emerging ransomware operators and extortion models, high-profile zero-day exploitation, and MDR detection trends.<\/p>\n<h4 class=\"smallhead\"><b>About Beazley Security<\/b><\/h4>\n<p>Beazley Security is a global cybersecurity services firm offering managed detection and response, incident response, exposure management, and advisory services to organizations of all sizes. Beazley Security combines decades of cyber security protection, detection, response, and recovery expertise with the actuarial precision and risk mitigation capability of our parent company, Beazley.&nbsp;Beazley Security Labs publishes ongoing research and advisories at <a href=\"https:\/\/labs.beazley.security\/\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">labs.beazley.security<\/a>.<\/p>\n<h4 class=\"smallhead\"><b>About Beazley<\/b><\/h4>\n<p>Beazley plc <em>(BEZ.L)<\/em> is the parent company of specialist insurance businesses with operations in Europe, North America, Latin America, Bermuda and Asia. Beazley manages six Lloyd\u2019s syndicates and, in 2025, underwrote gross premiums worldwide of $6,100.7 million. All Lloyd\u2019s syndicates are rated \u2018A+\u2019 by A.M. Best.<\/p>\n<p>Beazley\u2019s underwriters in the United States focus on writing a range of specialist insurance products. In the admitted market, coverage is provided by Beazley Insurance Company, Inc., an A.M. Best \u2018A\u2019 rated carrier licensed in all 50 states. In the surplus lines market, coverage is provided by the Beazley syndicates at Lloyd\u2019s.<\/p>\n<p>Beazley\u2019s European insurance company, Beazley Insurance dac, is regulated by the Central Bank of Ireland and is \u2018A\u2019 rated by A.M. Best and \u2018A+\u2019 by Fitch.<\/p>\n<p>Beazley\u2019s Bermuda entity, Beazley Bermuda Insurance Limited, is \u2018A\u2019 rated by A.M. Best and regulated by the Bermuda Monetary Authority<\/p>\n<p>Beazley is a market leader in many of its chosen lines, which include Directors &amp; Officers, Financial Lines, Cyber, Property, Marine and Aviation, Reinsurance, Accident and Life, and Political Risks and Contingency business. For more information, please visit <a href=\"https:\/\/www.beazley.com\/\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">www.beazley.com<\/a>.<\/p>\n<p class=\"referencetext\"><em>SOURCE: Beazley Group via Omnia Partners<\/em><\/p>\n<p> Tags: <a href=\"https:\/\/insurance-canada.ca\/tag\/artificial-intelligence\/\" rel=\"tag\">Artificial Intelligence (AI)<\/a>, <a href=\"https:\/\/insurance-canada.ca\/tag\/beazley\/\" rel=\"tag\">Beazley<\/a>, <a href=\"https:\/\/insurance-canada.ca\/tag\/cyber-attacks\/\" rel=\"tag\">cyber attacks<\/a>, <a href=\"https:\/\/insurance-canada.ca\/tag\/cyber-risk\/\" rel=\"tag\">cyber risk<\/a>, <a href=\"https:\/\/insurance-canada.ca\/tag\/cyber-security\/\" rel=\"tag\">cyber security<\/a>, <a href=\"https:\/\/insurance-canada.ca\/tag\/trends\/\" rel=\"tag\">trends<\/a> <\/p>\n","protected":false},"excerpt":{"rendered":"<p>Beazley Security\u2019s Q2 2026 Quarterly Threat Report finds agentic AI reshaping vulnerability research far faster than it is changing how attackers break in Disclosed vulnerabilities increased 36% in Q2, while confirmed exploitations in the&#46;&#46;&#46;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[1],"class_list":["post-25301","post","type-post","status-publish","format-standard","hentry","tag-news"],"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/blog.lifeinsurance-orleans.ca\/index.php\/wp-json\/wp\/v2\/posts\/25301","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.lifeinsurance-orleans.ca\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.lifeinsurance-orleans.ca\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.lifeinsurance-orleans.ca\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.lifeinsurance-orleans.ca\/index.php\/wp-json\/wp\/v2\/comments?post=25301"}],"version-history":[{"count":0,"href":"https:\/\/blog.lifeinsurance-orleans.ca\/index.php\/wp-json\/wp\/v2\/posts\/25301\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.lifeinsurance-orleans.ca\/index.php\/wp-json\/wp\/v2\/media?parent=25301"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.lifeinsurance-orleans.ca\/index.php\/wp-json\/wp\/v2\/categories?post=25301"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.lifeinsurance-orleans.ca\/index.php\/wp-json\/wp\/v2\/tags?post=25301"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}