AI-powered cyberattacks fuel 'Black October' fears

Startup founder Colin Parsons woke up to roughly 50 billing notifications he never expected. He reported that his OpenAI and Anthropic accounts had racked up $449 in charges he didn't recognize. It was an expensive surprise that highlights how quickly stolen credentials can become a financial headache.

His experience comes as hackers increasingly use artificial intelligence to automate attacks at speeds that leave security teams scrambling. Meanwhile, researchers have uncovered dangerous weaknesses in software that helps power millions of websites.

Some cybersecurity professionals are calling this turbulent period "Black October." The name may sound dramatic, but the developments behind it deserve attention. And while many attacks target large organizations, the consequences can eventually reach your personal accounts. Here's what's happening, how are changing online security and what you can do to protect yourself.

Join our upcoming CyberGuy LIVE class: 5 Ways to Travel Smarter and Save Money

In this free live online class, Kurt "CyberGuy" Knutsson will share five practical ways to protect your trip and your wallet this holiday travel season. Youll learn how to secure your phone and personal information, find better travel deals, avoid common scams, save money on bookings and use technology to make your travels easier and less stressful. No technical experience is needed.

Join us Saturday, October 31, at 11 AM ET / 8 AM PT. Register free now at CyberGuyLive.com.

BILL GATES SOUNDS ALARM ON AI-POWERED CYBERATTACKS, WARNS OF 'NEGATIVE SURPRISES' WITHIN A YEAR

October 2026 has delivered a troubling wave of cybersecurity developments. Hackers have gained access to more powerful tools, while researchers have uncovered serious weaknesses in widely used software. Security professionals are reportedly struggling to keep pace with increasingly automated attacks. Some have started calling the current wave "Black October."

The term describes a series of cybersecurity emergencies rather than a single coordinated hacking campaign. The biggest concern is speed. Traditionally, hackers needed significant time and technical expertise to investigate potential targets. They also had to develop attack methods and analyze the information they obtained. Now, AI tools can automate portions of that work. Some can operate continuously and pursue multiple potential targets at once. As a result, companies may have less time to respond when criminals discover a way into their systems.

One of the clearest examples comes from Microsoft. On Oct. 21, Microsoft Threat Intelligence revealed that a China-state-aligned hacking group called Storm-0940 had used an AI-powered penetration testing framework called ARTEX. The open-source tool can automate security testing tasks, including investigating networks and identifying potential weaknesses. In the hands of criminals, those capabilities can accelerate attempts to gain unauthorized access.

According to Microsoft, the group used ARTEX to target hundreds of organizations across multiple industries. Several attacks resulted in unauthorized privileged access to cloud systems. In multiple cases, attackers reached that level of access in less than three hours. Although many attempts failed, the successful intrusions demonstrate how quickly AI-assisted attacks can unfold.

Between Oct. 10 and 14, Microsoft recor