AI agents just compressed a 2-week hack into 10 hours. No zero-days. No super-hackers. Just machine speed.

Unit 42 responded to a ransomware attack on September 2 that ended in under 10 hours.

The same intrusion would have taken a skilled human team roughly two weeks.

50+ MITRE ATT&CK techniques. No novel zero-days. No elite tradecraft. Just frontier AI models executing known methods at a speed defenders were never built for.

Here's the chain:
- Breached a public API to tunnel in
- Deployed autonomous recon agents to map internal microservices
- Sub-agents scraped code repos for hard-coded tokens
- Stole root credentials through the secrets management system
- Hijacked CI/CD pipelines for cloud access keys
- Turned the victim's own AI infrastructure into attack infrastructure

The attacker then left an 80-page security audit as part of the ransom package. It was formatted like a professional pen-test report. The AI was already documenting everything for its own planning — generating the report took almost no extra effort.

IBM's 2026 breach report confirms: 1 in 4 malicious breaches are now AI-enabled. They cost $1 million more than the average breach.

Your SOC was built for a world where you had days to respond.

You now have hours. At the extreme end, CrowdStrike observed a 27-second breakout time.

Audit your incident response playbooks today. If your containment process requires a human to open a ticket, approve escalation, and then act — you've already lost.

You're not defending against smarter hackers. You're defending against faster ones.

SOURCE: https://unit42.paloaltonetworks.com/ai-assisted-cyber-attack-inside-a-unit-42-investigation/
VERIFIED: Unit 42 (Palo Alto Networks), eSecurity Planet, Tech Insider, Dark Reading, The Register
SIGNAL: This is the first documented case of fully autonomous AI agents executing an entire ransomware attack chain. It compresses the defender's response window from days to hours — a structural shift that invalidates most incident response playbooks built for human-speed attacks.