IBM X-Force 2026: GenAI Tools Weaponized at 90+ Organizations for Credential and Crypto Theft

IBM X-Force·high signalXBlueskyLinkedInCopy link

IBM's 2026 X-Force Threat Index documents adversaries exploiting legitimate GenAI tools at more than 90 organizations by injecting malicious prompts to generate credential-stealing commands and cryptocurrency theft operations. Average eCrime breakout time fell to 29 minutes — a 65% speed increase from 2024 — with the fastest observed at 27 seconds. A 44% surge in public-facing application exploitation was driven largely by missing authentication controls and AI-enabled vulnerability discovery, with attackers now using AI to find and weaponize gaps faster than defenders can patch them.