A ransomware attacker used AI agents to move through an enterprise network in less than 10 hours, according to Palo Alto Networks researchers, who estimated that similar work could have taken human operators about two weeks.
The incident involved more than 50 techniques mapped to the MITRE ATT&CK framework, according to the company’s Unit 42 threat research team. The techniques themselves were largely familiar. The notable difference, according to Unit 42, was the use of AI agents that could interpret the results of their actions and adapt subsequent steps during the intrusion.
Unit 42 said it observed several indicators consistent with AI use during its investigation. The threat actor also ...