AI Agents Complete Enterprise Ransomware Attack in 10 Hours, Leave 80-Page Security Audit

How a lone attacker breached enterprise defenses at AI speed: A 10-hour play-by-play - ZDNET

* An AI-driven ransomware campaign took 10 hours to do weeks' worth of red teaming. * Within hours, AI weaponized over 50 MITRE ATT&CK techniques. * What can organizations do? Unit 42 has recommendations. We've been warned that artificial intelligence (AI) and large language models (LLMs) have the processing power and speed to launch cyberattacks far more quickly than we can defend against them. There's been little in the way of concrete timeframes to show us what we're up against, but now, a new analysis shows that AI can perform what would normally take cybersecurity specialists weeks to do in mere hours. Also: 'Sophisticated' AI swarm attacks are months away, OpenAI warns: What experts say businesses must do On Wednesday, Palo Alto Networks' Unit 42 cybersecurity team published research into how AI models can be used to autonomously breach enterprise networks. The release, a follow-up to the firm's launch of its Frontier AI Defense service last week, outlines how AI autonomously breached an enterprise network during a ransomware campaign, at a speed and with an impact that could be compared to red team defenders given weeks to run a penetration test. The timeline Unit 42 responded to the incident, described as "a human attacker using frontier AI to breach an enterprise network autonomously as part of a ransomware attack." By harnessing AI, the threat actor managed to do the following in 10 hours: * Infiltration: A public API endpoint was breached, and a reconnaissance agent was deployed to map the victim's network architecture. * Credential theft: Agents were then tasked with rifling through enterprise code repositories, leading to the theft of hard-coded tokens and service passwords. * Privileges gained: Now armed with tokens, the attacker breached a secrets management system, stole master admin credentials, and obtained root system access. * Target the pipelines: An enterprise code app was then hijacked, and the attacker tried to plant backdoors, but failed. * AI infrastructure hijacking: Using stolen keys, the attacker then seized control of AI endpoints to "use the company's compute power to perpetrate future moves." "The agents breached the company's security layers in a methodical manner, each targeting a different layer of defense to achieve a shared goal," Unit 42 said. "The impact was at the scale of a coordinated effort from multiple red teams, which would normally take human operators around two weeks." Why does AI matter in this attack? First and foremost, the sheer speed and efficiency of the attack are significant. According to the researchers, by leveraging frontier AI models and automation, the attacker was able to leverage over 50 MITRE ATT&CK techniques in less than 10 hours -- no zero-day vulnerability or novel attack method necessary. Also: After the vibe-coding rush comes the debugging hangover However, adaptation may be the real concern here. The cybercriminal was able to leave AI agents to formulate intrusion methods on their own, adapt, and pivot to achieve their tasks. To add insult to injury, the threat actor left a report behind, detailing the weaknesses in the organization's security. How to address agentic AI attacks As Sherrod DeGrippo, VP Threat Intelligence at Unit 42, previously said, AI is a "force multiplier" not just for defense, but for attackers today and future threat actors. AI is an "incredible tool," as the executive noted, but in the hands of the wrong people, you're arming what were once low-skilled individuals and groups with capabilities close to those of state-sponsored, well-resourced threat actors. Also: A low-tech solution from the past may be your best defense against AI deepfakes With the enterprise now facing these threats at scale, Unit 42 recommends that organizations and their defenders consider the following and begin adapting their security policies accordingly:

AI agents carried out every step of this ransomware attack - then left the victim an 80-page security audit

A human ransomware crook used frontier AI models to breach an enterprise network in less than 10 hours, an intrusion Unit 42 says would normally take human operators around two weeks. The human attacker then told negotiators that they used frontier models and agentic attack frameworks with AI agents carrying out each step in the intrusion, including leaving an 80-page security audit for the victim company. "What made the attack stand out was AI-assisted operational efficiency, without the need for a novel zero-day or super elite tradecraft," Unit 42 incident responders said in a Wednesday report. "The attacker left tactical execution to AI agents that monitored, evaluated, acted and re-planned in real time, increasing speed throughout the attack chain." The security shop did not immediately answer The Register's questions about the intrusion, including which models and frameworks the attacker used. Breaking down the attack In a first step, the human attacker employed AI agents to perform reconnaissance, then gained access by breaching a public API endpoint to tunnel into the enterprise network. Upon breaking in, the attacker deployed an automated recon agent to map internal microservices. Additional subagents scraped code repositories to steal hard-coded tokens and service passwords. Using these tokens, the AI intruders accessed the org's secret-management system and stole the master administrative credentials to gain root system access. "Specialist pivot agents" then validated access to the company's cloud, identity, CI/CD, container, and SaaS environments. The attacker also hijacked CI/CD workflows to steal cloud access keys and turn the victim's cloud AI services into post-compromise infrastructure. This allowed the attacker to consume the victim's compute resources while hiding orchestration traffic among legitimate activity. After achieving the human operator's goals, an agent left the victim an 80-page report on its security failings, detailing "dozens of exploited findings," the incident responders wrote. Not surprisingly, Palo Alto Networks says the only way defenders can protect their environments against machine-speed attacks is to use AI agents themselves. "Deploy automated playbooks that simultaneously revoke credentials, terminate OAuth sessions, freeze CI/CD pipelines and isolate cloud accounts across all operational planes," the authors advise. The incident response team also suggests companies treat AI as core infrastructure. This requires taking inventory of every model endpoint, API key, Model Context Protocol (MCP) gateway, and AI tool integration, and applying rate limits and least-privilege policies - or risk an unexpected and very large token bill. ®