AI-powered cyberattacks fuel ‘Black October’ fears
A wave of cybersecurity incidents in October 2026 has prompted some professionals to call the period “Black October”, as AI tools help attackers automate parts of their work. The concern is that automated probing can let criminals target more systems and move from discovery to unauthorised access faster, leaving organisations less time to respond. The article says attacks on large organisations can also put personal accounts at risk.
Microsoft reported that China-aligned group Storm-0940 used the open-source ARTEX framework to target hundreds of organisations; in several cases, attackers obtained privileged cloud access in under three hours. In a separate campaign from 10 to 14 October, Microsoft recorded more than 151,000 failed password-spraying attempts against 327 accounts at eight organisations, peaking at about 2,900 attempts a minute, with no successful logins observed. The article also describes startup founder Colin Parsons receiving around 50 unexpected billing notifications and $449 in unrecognised charges on his OpenAI and Anthropic accounts.
In short
- AI tools can speed up cyberattacks and reduce response time.
- Storm-0940 reportedly gained cloud access in under three hours.
- Microsoft recorded 151,000 failed login attempts in one campaign.
Explained simply
Cyberattacks involve attempts to break into computer systems or online accounts, often to steal information or gain control. Attackers may use automated tools to test many systems or passwords quickly, while organisations try to detect and block them.
Microsoft has reported activity by Storm-0940, a group it links to China, as well as a separate burst of password attempts against several organisations. In another example, startup founder Colin Parsons found unexpected billing notices and unrecognised charges on his AI service accounts.
The issue matters because a successful break-in at an organisation can expose data or access linked to people’s accounts. Faster, automated attacks may also give defenders less time to respond, although the reported password attempts did not result in successful logins.
AI Art Business Celebrity Companies Culture Cybersecurity Entertainment Technology World