LOTL-Vorfall-Tracker: KI-verstaerkte Angriffe und ihre Spuren
Tracking von LOTL-Vorfaellen mit KI-Komponente.
LOTL 2.0 Incident Tracker: Documented Cases of AI-Augmented Living-Off-the-Land Attacks (2025–2026)
Zusammenfassung
Living document tracking confirmed and suspected cases of autonomous or AI-augmented LOTL attacks in the wild. Updated as new evidence emerges. Includes attack chain analysis, tradecraft observations, and underwriting takeaways for each incident.
This is a living document. As evidence of autonomous or AI-augmented LOTL attacks accumulates, we’ll update this tracker with new cases, analysis, and underwriting implications. Each entry documents the tradecraft observed, the degree of automation suspected, and the relevance to cyber insurance risk assessment.Last updated: April 2026
Kernpunkte
- Die Cyber-Bedrohungslandschaft entwickelt sich rasant weiter
- KI-verstärkte Angriffe verändern das Risiko-Profil
- Underwriter und Makler müssen ihre Ansätze anpassen
- NIS2-Compliance wird zum Standard-Kriterium
Praktische Schritte
- Aktuelle Bedrohungsage verstehen
- Risikomodelle aktualisieren
- Deckungskonzepte überprüfen
- Kunden proaktiv beraten
Weitere Tools: Cyber-Risikorechner | FAIR-Report | NIS2-Checker | Security Scan
Michael Guiao Michael Guiao gründete Resiliently AI und schreibt Resiliently. Er hat CISM, CCSP, CISA und DPO-Zertifizierungen — aber sie verfallen lassen, denn im Zeitalter von KI ist Wissen billig. Worauf es ankommt, ist Urteilskraft — und die kommt aus acht Jahren Praxis bei Zurich, Sompo, AXA und PwC.
Get the full picture with premium access
In-depth reports, assessment tools, and weekly risk intelligence for cyber professionals.
Professional
Full platform — continuous monitoring, API access, white-label reports
Everything in Starter plus professional tools
Upgrade Now →Free NIS2 Compliance Checklist
Get the free 15-point PDF checklist + NIS2 compliance tips in your inbox.
No spam. Unsubscribe anytime. Privacy Policy
blog.featured
AI Tooling RCE: The Sublimit Layer Underwriters Rarely Underwrite
9 min read
SolarWinds SAML Bypass: The IT Ticketing Supply-Chain Path
9 min read
AM Best and S&P Flag Cyber Pricing Risks: What Underwriters Should Do at Renewal
7 min read
One Salesforce Integration Breach Just Hit 200 Cyber Insureds
8 min read
Premium Report
2026 Cyber Risk Landscape Report
24 pages of threat analysis, claims data, and underwriting implications for European cyber insurance.
View Reports →