Deepfake Videos for Business Attacks Drop to Just $5 per Minute as AI Costs Plummet
The cost of producing deepfake videos used in attacks against companies has fallen dramatically over the last two years. What once required several hundred dollars per minute can now be created for as little as $5, according to reporting by Izvestia.
Small and medium-sized businesses as well as large corporations face increased risk from these affordable GenAI tools. Criminals can now cheaply impersonate executives or colleagues in video calls to request urgent money transfers, document handovers, or login credentials.
Underground marketplaces are also offering ready-made templates that allow attackers to generate convincing fakes even faster and at lower cost. This combination of cheaper production and accessible templates lowers the entry threshold for online fraud significantly.
The combination of a familiar face on screen and time pressure makes it harder for employees to question instructions. Traditional visual verification is becoming less reliable as a security control.
Security experts recommend confirming all financial or sensitive requests through an independent, pre-agreed channel. A quick callback to the real person remains far cheaper than recovering from a successful deepfake-enabled fraud incident.
Related articles
Over a Dozen AI Platforms Breached in One Month for API Keys in LLM-Jacking Operations
Between late September and early November, at least a dozen AI developer platforms were compromised in a coordinated campaign targeting API access tokens rather than customer data. Affected organizations include Andromeda, NVIDIA Brev, CommandCode, Fireworks AI, Lightning AI, Northflank, OpenCode, Railway, Trigger.dev, Warp, Zeabur, Chainstack, and WorkOS. Attackers exploited third-party components and internal sales applications to reach stored credentials used for AI inference services. The stolen tokens enable LLM-jacking and model distillation activities, with multiple threat groups observed reusing the same credentials shortly after disclosure. The open-source penetration testing framework Artex was used to automate reconnaissance and exploitation, lowering the barrier for less skilled actors. Companies such as Chainstack and WorkOS confirmed the incidents through their own disclosures, highlighting risks in non-core systems that store high-value AI credentials.
NIST Publishes Draft Taxonomy SP 2400-102 for Attacks on AI Agents
The National Institute of Standards and Technology released the first public draft of SP 2400-102 E2026 on 9 November 2026, extending its 2025 machine learning attack taxonomy with a dedicated chapter on AI agents. The document provides a common terminology for attacks targeting task formulation, planning, tool execution, and result interpretation stages. Attack goals include availability disruption through infinite tool calls, integrity violations that alter outputs or trigger unauthorized actions, sensitive data disclosure, and malicious agent misuse. Vectors range from direct user prompt bypasses and supply-chain model poisoning to indirect prompt injection via untrusted documents, persistent memory poisoning, compromised tools, and inter-agent message spoofing. NIST also examines layered defenses combining model-level detection of parasitic instructions with system-level restrictions, tool isolation, and human confirmation for high-impact operations. The draft references OWASP LLM03:2026 Excessive Agency and aligns with Russian standards GOST R 56939-2024 and GOST R 59276-2020 for testing and trust evaluation. Comments are accepted until 18 December 2026 before final publication.
Fake ITSM Tickets Allow Attackers to Trick AI SOC Agents into Dismissing Real Incidents
An experiment with the DeepSeek model showed that AI agents in Security Operations Centers can be reliably deceived by forged change-management tickets rather than classic prompt injection. Attackers with limited rights edit already-approved tickets in an ITSM system, changing the server and maintenance window while preserving the “Approved” status. The agent reads the ticket, matches the observed actions to the documented work, and automatically closes the alert. Human analysts reviewing the closed case later see only the reassuring link to the ticket and may also accept the decision. Three common LLM-based defenses—strict prompting, a secondary critic model, and supplying audit logs—either blocked too many legitimate changes or still allowed a quarter of attacks through. Only a deterministic code gate that cross-checks the ticket against immutable logs, role directories, and time windows achieved zero false closures on the test set while still automating 97 percent of genuine maintenance events.
How AI Agents Are Reshaping Cybersecurity Hiring: What Employers Ask in 2026 Interviews
Cybersecurity job interviews in 2026 increasingly feature the question of how candidates work with AI agents, as employers seek engineers who can respond rapidly to emerging vulnerabilities. The shift stems from the fact that proof-of-concept exploits now appear within hours of disclosure, leaving defenders with almost no time for traditional patching workflows. Companies now expect security engineers to act as independent units capable of assessing exploit viability, mapping impact to their infrastructure, and detecting compromise indicators using agent-based automation. Innostage director Vladimir Dryukov explains that narrow specialists are losing ground to professionals who combine deep technical knowledge with the ability to build, constrain, and validate AI agent pipelines. The article outlines the four key competencies interviewers evaluate, practical ways to prepare even with limited experience, and why foundational expertise in operating systems, networks, and code remains essential. It also provides salary benchmarks and career advice for entry-level positions in a market where junior SOC roles are being automated.