AI agents breached an enterprise in 10 hours. They left an 80-page report on how bad your security is.

A threat actor used frontier AI models to breach an enterprise network in under 10 hours.

Not with a zero-day. Not with novel tradecraft.

With existing attack methods executed at machine speed by coordinated AI agents.

Palo Alto Networks Unit 42 documented the full attack chain.

The agents mapped internal microservices, scraped source code repos for hard-coded credentials, infiltrated the secrets manager, and harvested root-level administrative access.

They hijacked the victim's CI/CD pipelines. They attempted to plant backdoors in Terraform configs. They exfiltrated cloud access keys.

Then they turned the victim's own AI endpoints into post-compromise infrastructure.

The attackers executed more than 50 MITRE ATT&CK techniques in parallel.

And they left behind an 80-page technical report detailing every exploited weakness in the victim's security posture.

This is not theoretical. This is operational.

Unit 42 observed parallel LLM calls, structured Markdown files passing context between agents, and custom automation scripts assessed with high confidence to be AI-generated.

The attacker told Unit 42 directly: they leveraged frontier AI models and attack-specific agentic frameworks.

The playbook for defenders is clear. Inventory every model endpoint, API key, and MCP gateway. Apply least-privileged access controls and rate limits. Monitor for bursty API activity, rapid authentication-state changes, and parallel login attempts from unexpected identities.

If your incident-response playbooks cannot revoke credentials, freeze CI/CD pipelines, and isolate cloud accounts simultaneously, you are already behind.

Source: https://unit42.paloaltonetworks.com/ai-assisted-cyber-attack-inside-a-unit-42-investigation/
Verified: Unit 42 (Palo Alto Networks), Cyberpress, MITRE ATT&CK framework mapping
Signal: This is the first documented case of AI agents autonomously executing a full enterprise breach. Every CISO needs to see this.
---