{"id":16669,"date":"2026-09-03T09:47:09","date_gmt":"2026-09-03T09:47:09","guid":{"rendered":"https:\/\/newestek.com\/?p=16669"},"modified":"2026-09-03T09:47:09","modified_gmt":"2026-09-03T09:47:09","slug":"ai-agents-help-compress-ransomware-intrusion-to-under-10-hours-raising-stakes-for-cisos","status":"publish","type":"post","link":"https:\/\/newestek.com\/?p=16669","title":{"rendered":"AI agents help compress ransomware intrusion to under 10 hours, raising stakes for CISOs"},"content":{"rendered":"
\n
\n
\n
\n
\n
\n
<\/div>\n<\/section>\n

A ransomware attacker used AI agents to move through an enterprise network in less than 10 hours, according to Palo Alto Networks researchers, who estimated that similar work could have taken human operators about two weeks.<\/p>\n

The incident involved more than 50 techniques mapped to the MITRE ATT&CK framework, according to the company\u2019s Unit 42 threat research team<\/a>. The techniques themselves were largely familiar. The notable difference, according to Unit 42, was the use of AI agents<\/a> that could interpret the results of their actions and adapt subsequent steps during the intrusion.<\/p>\n

Unit 42 said it observed several indicators consistent with AI use during its investigation. The threat actor also told researchers during negotiations that frontier AI models and attack-specific agentic frameworks had been used.<\/p>\n

The attacker initially entered through a public-facing API endpoint before an automated reconnaissance agent mapped internal microservices, Unit 42 said. Other agents searched source-code repositories<\/a> for exposed credentials, which helped the attacker gain access to a secrets-management system and obtain administrative credentials.<\/p>\n

\u201cThe actor hijacked an enterprise code application via custom workflows to exfiltrate cloud access keys,\u201d Unit 42 said. \u201cThey attempted to plant backdoors in Terraform configurations.\u201d The researchers said existing branch protections prevented the attempted changes.<\/p>\n

Stolen cloud credentials were later used to access the victim\u2019s AI services, effectively turning its own computing resources into infrastructure that could support further attacker activity, according to Unit 42.<\/p>\n

The incident does not establish that the attack was fully autonomous. \u201cThe evidence points to a human-directed intrusion in which AI orchestrated delegated tactical work,\u201d said Sanchit Vir Gogia<\/a>, chief analyst at Greyhound Research.<\/p>\n

Faster attack cycles strain containment<\/h2>\n

The speed demonstrated in the Unit 42 investigation puts pressure on security teams to reduce the interval between identifying malicious activity and taking containment action, said Jonathan Ong<\/a>, senior analyst for managed security services at Omdia.<\/p>\n

\u201cEnterprises do not necessarily need a new threat model, but they do need to operate on a new clock,\u201d said Sakshi Grover<\/a>, senior research manager for IDC Asia Pacific Cybersecurity Services.<\/p>\n

Faster attacks also increase the importance of controlling non-human identities. CISOs should reduce reliance on long-lived credentials and move toward short-lived, narrowly scoped identities<\/a> for workloads and services, Grover said.<\/p>\n

CISOs may also need to examine how much authority their security providers have to act once malicious activity is detected. A provider could, for example, be authorized to disable a compromised account and invalidate its active credentials before the attacker can continue using them.<\/p>\n

Incident-response playbooks should also be adapted to the organization and allow providers to \u201cautomate containment without requiring in-house approval where feasible,\u201d Ong said.<\/p>\n

That does not mean handing unrestricted control to a third party. Ong said organizations should clearly establish responsibilities in advance and periodically test their response procedures through tabletop exercises.<\/p>\n

Detection needs broader context<\/h2>\n

The attack also illustrates the difficulty of detecting malicious activity that crosses systems which may be monitored separately. Ong said detection engineering should be tuned to an organization\u2019s normal activity so unusual behavior can be identified against that baseline.<\/p>\n

A suspicious action in one environment may not be enough to generate a meaningful alert. Its significance can become clearer when combined with activity elsewhere.<\/p>\n

For CISOs, that increases the importance of correlating telemetry across security systems rather than evaluating alerts largely within separate technology domains.<\/p>\n

Authority can travel across systems<\/h2>\n

Looking at systems in isolation can miss risks created by the connections between them.<\/p>\n

\u201cEach platform may have had controls, but the relationships between them created the exploitable path,\u201d Grover said.<\/p>\n

Gogia described one manifestation of this problem as \u201ctransitive authority,\u201d where access in one system can enable a more privileged action elsewhere.<\/p>\n

A repository account, for example, may not have cloud administrator privileges itself but could alter a workflow that assumes a more powerful cloud role. Entitlement reviews should therefore consider what an identity can cause another system to do, rather than only what it can access directly, he said.<\/p>\n

Gogia also pointed to the branch protection that blocked the attempted Terraform change as an example of the value of preventive controls when attack cycles accelerate.<\/p>\n

\u201cAs adversary decision cycles compress, prevention gains relative value precisely because it never has to outrun anyone,\u201d he said.<\/p>\n

The key question for security leaders is whether attackers can now move faster than existing controls can contain them. One practical test is to compare how quickly a realistic attack path can reach a critical system with how long the organization actually takes to detect and contain it.<\/p>\n

Grover said agent-assisted red-team exercises could be used to measure that gap. If an attack path can be completed before containment takes effect, the weakness is structural rather than hypothetical.<\/p>\n

\u201cThe principal risk is not that AI suddenly creates entirely new attack techniques,\u201d she said. \u201cIt lowers the time, expertise, and cost required to execute existing techniques concurrently and at scale.\u201d For boards, the issue is less about whether AI-enabled ransomware is an emerging threat than about whether existing controls can stop a credible attack path before it reaches a critical business system.<\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

A ransomware attacker used AI agents to move through an enterprise network in less than 10 hours, according to Palo Alto Networks researchers, who estimated that similar work could have taken human operators about two weeks. The incident involved more than 50 techniques mapped to the MITRE ATT&CK framework, according to the company\u2019s Unit 42 threat research team. The techniques themselves were largely familiar. The… <\/p>\n

Read More<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[1],"tags":[],"class_list":["post-16669","post","type-post","status-publish","format-standard","hentry","category-uncategorized","is-cat-link-borders-light is-cat-link-rounded"],"_links":{"self":[{"href":"https:\/\/newestek.com\/index.php?rest_route=\/wp\/v2\/posts\/16669","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/newestek.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/newestek.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/newestek.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/newestek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=16669"}],"version-history":[{"count":0,"href":"https:\/\/newestek.com\/index.php?rest_route=\/wp\/v2\/posts\/16669\/revisions"}],"wp:attachment":[{"href":"https:\/\/newestek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=16669"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/newestek.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=16669"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/newestek.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=16669"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}