TLDR Tech / InfoSec
AI agents help compress ransomware intrusion to under 10 hours, raising stakes for CISOs
A ransomware operator crossed an enterprise network in under 10 hours using AI agents, work Unit 42 estimated would have taken human hands roughly two weeks. The 50-plus ATT&CK techniques observed were unremarkable on their own, and analysts quoted here read the intrusion as human-directed, with AI handling delegated tactical work rather than anything approaching autonomy. The more durable observation is about transitive authority, where a repository account with no cloud admin rights can still alter a workflow that assumes a privileged cloud role, which is the gap that made speed matter.
Read the full story