Living Off The Land

Living off the Land refers to cyberattack techniques that exploit legitimate system tools and native software already present on target computers rather than introducing new malware. Attackers use built-in utilities like PowerShell, Windows Management Instrumentation, and command-line interfaces to execute malicious activities while evading traditional security detection systems. This matters for AI governance because machine learning models trained to identify threats must now account for these stealthy behaviors that blend indistinguishably with normal administrative operations, requiring more sophisticated behavioral analysis and anomaly detection frameworks to maintain compliance with enterprise security standards.

1 item

ResearchGlobal2026-08-04

Email AI Assistants Can Be Weaponized to Steal $250K and Suppress Audit Logs

Barracuda Networks researchers demonstrated a proof-of-concept attack in which a compromised email account's built-in AI assistant is turned against the enterprise, suppressing audit logs, conducting internal reconnaissance, and ultimately redirecting a $250,000 wire transfer. The attack uses only the AI tool's existing legitimate permissions, making it invisible to standard behavioral monitoring. Traditional compensating controls including MFA and email authentication did not prevent the attack chain.

Barracuda Networks business email compromise Living off the Land email AI assistant audit log integrity agentic AI BEC fraud prompt injection