--- title: Can you trust your chatbot? Inside three AI-powered... description: A panel discussion podcast covers three AI-enabled cyberattack trends: 'dark sourcery,' where malicious actors use answer-engine optimization to seed false... canonical: https://daily.dev/posts/can-you-trust-your-chatbot-inside-three-ai-powered-cyberattacks-qjlwl4if1 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Can you trust your chatbot? Inside three AI-powered cyberattacks | daily.dev og:description: A panel discussion podcast covers three AI-enabled cyberattack trends: 'dark sourcery,' where malicious actors use answer-engine optimization to seed false... og:url: https://daily.dev/posts/can-you-trust-your-chatbot-inside-three-ai-powered-cyberattacks-qjlwl4if1 og:image: https://api.daily.dev/og/posts/QjLwL4if1.png og:image:alt: Can you trust your chatbot? Inside three AI-powered cyberattacks og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Can you trust your chatbot? Inside three AI-powered cyberattacks **[IBM Technology](https://daily.dev/sources/ibmtechnology)** · 34 min read · 0 upvotes · 0 comments ## Summary A panel discussion podcast covers three AI-enabled cyberattack trends: 'dark sourcery,' where malicious actors use answer-engine optimization to seed false information (like fake customer support numbers) that chatbots like ChatGPT and Gemini cite as fact, with one study claiming 91% of frequent chatbot searchers don't verify answers; a months-long LLM-assisted hacking spree tracked by Grey Noise exploiting critical flaws in Ubiquiti, WordPress, and Zyxel devices, using dozens of scripts to bypass Microsoft's anti-malware interface; and an AI agent swarm attack that breached 440 PaperCut instances across 395 organizations in 48 countries, moving from an empty workspace to remote code execution in about 4 hours. Panelists stress that basic cyber hygiene, patching, zero trust, MFA, and network segmentation remain the primary defenses against these AI-amplified threats. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What is the dark sourcery attack and how does it trick AI chatbots like ChatGPT into giving out wrong information? Dark sourcery is a campaign identified by researchers at Vigilance Security where malicious actors use answer engine optimization (AEO) techniques to seed the internet with false content, tricking chatbots like ChatGPT and Google Gemini into citing fake information, such as fraudulent customer support numbers, in their responses. It works like SEO poisoning but targets AI answer engines instead of search rankings, and reportedly affected around 374 companies including major banks and airlines. _Anyone relying on chatbot answers for support numbers can track emerging AI trust exploits like this on daily.dev._ ### How fast did the AI agent swarm attack on PaperCut print management software spread across organizations? The attacker went from an empty workspace to achieving remote code execution on a victim in about 4 hours, according to Grey Noise. The campaign, powered by a swarm of hundreds of AI agents, hit at least 440 PaperCut instances belonging to 395 organizations across 48 countries, and once inside, the agents targeted victims' Windows Active Directory environments. _Teams securing print infrastructure can follow fast-moving AI-driven exploit reports like this on daily.dev._ ### What vulnerabilities did the LLM-assisted hacking spree tracked by Grey Noise exploit? A threat actor used an LLM to build tools exploiting critical flaws in Ubiquiti, WordPress, and Zyxel switches, including roughly 17 different scripts designed to evade Microsoft's Antimalware Scan Interface (AMSI). The Ubiquiti vulnerability and its patch were released in May, yet exploitation occurred about 20 days later, underscoring how slow patching left systems exposed despite fixes being available. _Sysadmins tracking patch timelines for Ubiquiti and similar gear can follow exploit reports like this on daily.dev._ ## Similar posts on daily.dev - [Security shifts to the human layer as AI scams surge](https://daily.dev/posts/security-shifts-to-the-human-layer-as-ai-scams-surge-uermo5dgq) · CSO Online · 0 upvotes · 0 comments - [Hackers are hiding malware behind AI agents that antivirus cannot see](https://daily.dev/posts/hackers-are-hiding-malware-behind-ai-agents-that-antivirus-cannot-see-5kzqds6hd) · TechCentral · 1 upvotes · 0 comments - [The AI Attack Surface: How Threat Actors Abuse Trusted AI Platforms](https://daily.dev/posts/the-ai-attack-surface-how-threat-actors-abuse-trusted-ai-platforms-clbkcskrj) · Huntress Blog · 1 upvotes · 0 comments - [When Chatbots Go Rogue: Securing Conversational AI in Cyber Defense](https://daily.dev/posts/when-chatbots-go-rogue-securing-conversational-ai-in-cyber-defense-71v6ycqie) · Security Boulevard · 0 upvotes · 0 comments --- Tags: [#llm](https://daily.dev/tags/llm), [#ai-agents](https://daily.dev/tags/ai-agents), [#ai-security](https://daily.dev/tags/ai-security), [#prompt-injection](https://daily.dev/tags/prompt-injection) [View this post on daily.dev](https://daily.dev/posts/can-you-trust-your-chatbot-inside-three-ai-powered-cyberattacks-qjlwl4if1) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Can you trust your chatbot? Inside three AI-powered cyberattacks","url":"https://daily.dev/posts/can-you-trust-your-chatbot-inside-three-ai-powered-cyberattacks-qjlwl4if1","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/can-you-trust-your-chatbot-inside-three-ai-powered-cyberattacks-qjlwl4if1"},"datePublished":"2026-09-30T10:23:00.486Z","dateModified":"2026-09-30T10:23:21.471Z","description":"A panel discussion podcast covers three AI-enabled cyberattack trends: 'dark sourcery,' where malicious actors use answer-engine optimization to seed false...","image":"https://i.ytimg.com/vi/dHn0qzSDMO0/sddefault.jpg","thumbnailUrl":"https://i.ytimg.com/vi/dHn0qzSDMO0/sddefault.jpg","isAccessibleForFree":true,"articleSection":"IBM Technology","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"IBM Technology","logo":"https://media.daily.dev/image/upload/s--OXHaOiWX--/f_auto/v1715498011/logos/ibmtechnology","url":"https://daily.dev/sources/ibmtechnology"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/can-you-trust-your-chatbot-inside-three-ai-powered-cyberattacks-qjlwl4if1","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"llm,ai-agents,ai-security,prompt-injection","timeRequired":"PT34M","video":{"@type":"VideoObject","name":"Can you trust your chatbot? Inside three AI-powered cyberattacks","description":"A panel discussion podcast covers three AI-enabled cyberattack trends: 'dark sourcery,' where malicious actors use answer-engine optimization to seed false...","thumbnailUrl":"https://i.ytimg.com/vi/dHn0qzSDMO0/sddefault.jpg","uploadDate":"2026-09-30T10:23:00.486Z","duration":"PT34M","url":"https://api.daily.dev/r/QjLwL4if1","embedUrl":"https://www.youtube.com/embed/dHn0qzSDMO0"}} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"IBM Technology","item":"https://daily.dev/sources/ibmtechnology"},{"@type":"ListItem","position":3,"name":"Can you trust your chatbot? Inside three AI-powered cyberattacks"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/can-you-trust-your-chatbot-inside-three-ai-powered-cyberattacks-qjlwl4if1#faq","mainEntity":[{"@type":"Question","name":"What is the dark sourcery attack and how does it trick AI chatbots like ChatGPT into giving out wrong information?","acceptedAnswer":{"@type":"Answer","text":"Dark sourcery is a campaign identified by researchers at Vigilance Security where malicious actors use answer engine optimization (AEO) techniques to seed the internet with false content, tricking chatbots like ChatGPT and Google Gemini into citing fake information, such as fraudulent customer support numbers, in their responses. It works like SEO poisoning but targets AI answer engines instead of search rankings, and reportedly affected around 374 companies including major banks and airlines. Anyone relying on chatbot answers for support numbers can track emerging AI trust exploits like this on daily.dev."}},{"@type":"Question","name":"How fast did the AI agent swarm attack on PaperCut print management software spread across organizations?","acceptedAnswer":{"@type":"Answer","text":"The attacker went from an empty workspace to achieving remote code execution on a victim in about 4 hours, according to Grey Noise. The campaign, powered by a swarm of hundreds of AI agents, hit at least 440 PaperCut instances belonging to 395 organizations across 48 countries, and once inside, the agents targeted victims' Windows Active Directory environments. Teams securing print infrastructure can follow fast-moving AI-driven exploit reports like this on daily.dev."}},{"@type":"Question","name":"What vulnerabilities did the LLM-assisted hacking spree tracked by Grey Noise exploit?","acceptedAnswer":{"@type":"Answer","text":"A threat actor used an LLM to build tools exploiting critical flaws in Ubiquiti, WordPress, and Zyxel switches, including roughly 17 different scripts designed to evade Microsoft's Antimalware Scan Interface (AMSI). The Ubiquiti vulnerability and its patch were released in May, yet exploitation occurred about 20 days later, underscoring how slow patching left systems exposed despite fixes being available. Sysadmins tracking patch timelines for Ubiquiti and similar gear can follow exploit reports like this on daily.dev."}}]} ```