Startup founder Colin Parsons woke up to roughly 50 billing notifications he never expected.
asserted
he → wake → notifications
He reported that his OpenAI and Anthropic accounts had racked up $449 in charges he didn't recognize.
asserted
he → report → charges
It was an expensive surprise that highlights how quickly stolen credentials can become a financial headache.
asserted
credentials → highlight → ?
His experience comes as hackers increasingly use artificial intelligence to automate attacks at speeds that leave security teams scrambling.
asserted
that → come → teams
Meanwhile, researchers have uncovered dangerous weaknesses in software that helps power millions of websites.
asserted
that → uncover → websites
Some cybersecurity professionals are calling this turbulent period "Black October."
asserted
professionals → call → period
The name may sound dramatic, but the developments behind it deserve attention.
uncertain
developments → sound → attention
And while many attacks target large organizations, the consequences can eventually reach your personal accounts.
asserted
consequences → target → accounts
Here's what's happening, how AI-powered cyberattacks are changing online security and what you can do to protect yourself.
asserted
you → happen → yourself
Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money
In this free live online class, Kurt "CyberGuy" Knutsson will share five practical ways to protect your trip and your wallet this holiday travel season.
asserted
Knutsson → join → trip
You’ll learn how to secure your phone and personal information, find better travel deals, avoid common scams, save money on bookings and use technology to make your travels easier and less stressful.
asserted
travels → learn → technology
No technical experience is needed.
asserted
experience → need → ?
Why cybersecurity experts are calling it Black October
October 2026 has delivered a troubling wave of cybersecurity developments.
asserted
October → call → developments
Hackers have gained access to more powerful tools, while researchers have uncovered serious weaknesses in widely used software.
asserted
researchers → gain → software
Security professionals are reportedly struggling to keep pace with increasingly automated attacks.
uncertain
professionals → struggle → attacks
Some have started calling the current wave "Black October."
asserted
Some → start → wave
The term describes a series of cybersecurity emergencies rather than a single coordinated hacking campaign.
asserted
term → describe → campaign
Traditionally, hackers needed significant time and technical expertise to investigate potential targets.
asserted
hackers → need → targets
They also had to develop attack methods and analyze the information they obtained.
asserted
they → have → information
Now, AI tools can automate portions of that work.
asserted
tools → automate → work
Some can operate continuously and pursue multiple potential targets at once.
asserted
Some → operate → targets
As a result, companies may have less time to respond when criminals discover a way into their systems.
uncertain
criminals → have → systems
Microsoft exposes AI cyberattacks moving at machine speed
One of the clearest examples comes from Microsoft.
asserted
One → expose → Microsoft
On Oct. 21, Microsoft Threat Intelligence revealed that a China-state-aligned hacking group called Storm-0940 had used an AI-powered penetration testing framework called ARTEX.
asserted
group → reveal → framework
The open-source tool can automate security testing tasks, including investigating networks and identifying potential weaknesses.
asserted
tool → automate → weaknesses
In the hands of criminals, those capabilities can accelerate attempts to gain unauthorized access.
asserted
capabilities → accelerate → access
According to Microsoft, the group used ARTEX to target hundreds of organizations across multiple industries.
uncertain
group → accord → industries
Several attacks resulted in unauthorized privileged access to cloud systems.
asserted
attacks → result → systems
In multiple cases, attackers reached that level of access in less than three hours.
asserted
attackers → reach → hours
Although many attempts failed, the successful intrusions demonstrate how quickly AI-assisted attacks can unfold.
asserted
attacks → fail → ?
Hackers launch thousands of login attempts per minute
asserted
Hackers → launch → minute
Between Oct. 10 and 14, Microsoft recorded more than 151,000 failed login attempts in one campaign targeting 327 accounts across eight organizations.
asserted
Microsoft → record → organizations
At its peak on Oct. 11, attackers generated approximately 2,900 failed login attempts per minute.
asserted
attackers → generate → minute
The technique, known as password spraying, involves trying passwords against multiple accounts to identify a working login.
asserted
technique → know → login
Importantly, Microsoft did not observe successful logins during that specific campaign.
asserted
Microsoft → observe → campaign
However, it documented unauthorized access and suspicious activity in other environments associated with the same threat group.
asserted
it → document → group
Microsoft also connected Storm-0940 to a compromise involving ConnectWise, a company that provides software used by IT service providers.
asserted
that → connect → providers
Attackers exploited access associated with ConnectWise cloud applications to attempt entry into customer environments.
asserted
Attackers → exploit → environments
Some then carried out further activity through Microsoft cloud services, including changes that could help them maintain access.
uncertain
them → carry → access
Microsoft cautioned that suspicious access does not automatically mean customer information was stolen.
asserted
information → caution → ?
…and 121 more, not listed.
The Aporia
