Unit 42 - Latest Cyber Security Research
Unit 42 briefing warns frontier AI models compress exploit development timelines and highlights 2026 incident response report findings on AI-accelerated attacks.
Palo Alto Networks Unit 42 published a threat briefing and Global Incident Response Report arguing that frontier AI models enable threat actors to move from initial access to exfiltration in minutes rather than months. The report found attacks are 4x faster, 65% of initial access is driven by identity-based techniques, and 87% of attacks unfold across multiple surfaces. The briefing offers CISO guidance on prioritizing defenses against AI-accelerated, automated attacks.
- Attacks now 4x faster with exfiltration in under one hour
- 65% of initial access driven by identity-based techniques
- 87% of attacks span multiple attack surfaces
- Frontier AI compresses exploit development from months to minutes
Full article417 words · extracted from unit42.paloaltonetworks.com · click to collapse
Industrial & Critical Infrastructure Security
Critical infrastructure is changing. Security must change with it. As industrial systems become more connected, converge with IT, and adopt AI and automation, cyber risk increasingly extends beyond data to affect physical operations. Understanding how these changes are reshaping the threat landscape is essential to strengthening operational resilience and preparing for what’s next.
- Expanding attack surface: Greater connectivity across industrial environments creates new pathways for cyber risk.
- Real-world impact: Cyber incidents can affect safety, production, and business continuity, not just data.
- What’s changing: AI, automation, and IT/OT convergence are reshaping how organizations approach industrial security.
Insights – Explore fresh perspectives from Unit 42
Recent Articles
Insights – Explore fresh perspectives from Unit 42
Unit 42 Breaking Insights: Combat Risks from Frontier AI Models
The latest frontier AI models are changing cyber risk faster than traditional defenses can adapt. In this threat briefing, Sam Rubin, SVP of Unit 42, and Palo Alto Networks CISO Marc Benoit will break down how these new models can find and exploit exposures that have gone undetected for years and the implications for security leaders.
This session examines how the threat landscape has hit an inflection point, with work that once took deep expertise, time, and manual effort happening in seconds at machine scale. Our experts will discuss what CISOs need to prioritize now to reduce exposure before attackers put these capabilities to broader use.
- Exploit time compression: How frontier AI models are shrinking the time from vulnerability discovery to exploitation from months to minutes.
- The biggest risks today: The most immediate risks created by sophisticated, automated attacks at scale.
- Immediate actions to take: Practical guidance from Palo Alto Networks’ own CISO on what leaders should do now.
Frontline insights defining the next era of cyber risk.
Explore the findings.
The 2026 Unit 42 Global Incident Response Report confirms it: The adversary isn’t just smarter; they are faster.
Your new threat reality? AI enables threat actors to move from initial access to exfiltration in minutes, effortlessly bypassing traditional defenses.
In the report, you will learn how:
- Speed now defines risk: Attacks are 4X faster, with data exfiltration in <1 hour in some cases.
- Identity accelerates impact: 65% of initial access is driven by identity-based techniques allowing unauthorized access, privilege escalation and lateral movement.
- Sprawl expands exposure: 87% of attacks unfolded across multiple attack surfaces, making it harder to correlate attack signals.
Text extracted automatically; images, tables and formatting may be missing. Original: https://unit42.paloaltonetworks.com/