Fortinet Report Reveals Soaring Cyberattacks Powered by AI and Automation

Fortinet’s latest Global Threat Landscape Report from FortiGuard Labs highlights a sharp rise in cyberattacks, driven by automation, artificial intelligence (AI), and easy access to hacking tools. The report shows how cybercriminals are getting faster, smarter, and more organized, making it harder for traditional security systems to keep up.

Fortinet’s experts say hackers are using AI and automation to scan the internet at record speeds to find weak spots. In 2024, scanning activity jumped nearly 17% worldwide, with around 36,000 scans happening every second. These scans help attackers quickly spot vulnerabilities in systems like RDP, SIP, and IoT protocols.

At the same time, cybercrime marketplaces on the darknet are booming. Over 40,000 new software flaws were added to the National Vulnerability Database last year, a 39% increase. Hackers are selling login credentials, RDP access, admin panels, and even full exploit kits. The number of stolen credentials available online jumped 500%, reaching 1.7 billion records.

AI is also making attacks more convincing and harder to detect. Tools like FraudGPT and BlackmailerV3 are being used to create realistic phishing campaigns and evade defenses. Unlike ethical AI tools, these versions have no restrictions.

Industries like manufacturing, finance, healthcare, and retail have seen a spike in targeted attacks. The U.S. was hit hardest, followed by the U.K. and Canada. Many attacks focused on cloud services and IoT devices, taking advantage of misconfigured systems and weak login security.

Cybercriminals are also heavily trading in credentials—usernames and passwords are now the core currency of the darknet. Attackers use “combo lists” to carry out mass credential-stuffing attacks, leading to account takeovers and fraud.

Fortinet recommends companies shift to a more proactive defense strategy using AI, zero trust, and continuous threat monitoring. The report includes a “CISO Playbook” with key tips, including real-world attack simulations, patching critical vulnerabilities, and monitoring the darknet for early warning signs.