Unit 42 warns AI has shifted balance of power from defenders to attackers
Unit 42 says agentic AI has shifted attacker advantage, investigating an incident where one attacker exploited 50 enterprise applications in under 10 hours.
Palo Alto Networks Unit 42 leaders said early waves of agentic AI-enabled attacks are breaking in the wild and that frontier model capabilities have shifted the balance of power from defenders to attackers. The team is actively investigating an attack on a customer where an attacker used an agentic framework to exploit 50 applications and other weaknesses across the enterprise in less than 10 hours, work they estimate would have taken at least 10 days pre-AI. Unit 42 says AI already touches the entire attack chain, including malware development, social engineering, and ransomware negotiations. The warning follows April's Project Glasswing initiative formed with Anthropic around its Mythos model.
- Agentic AI attack exploited 50 applications at a customer in under 10 hours
- Equivalent pre-AI effort estimated at 10+ days
- Four predicted shifts: force multiplier, identity as compromise vector, supply chain burrowing, nation-state learning
- AI used across the attack chain including ransomware negotiations and social engineering
- Warning tied to April's Project Glasswing with Anthropic's Mythos model
- Vendors
- Palo Alto Networks
- Victims
- an unnamed Unit 42 customer
- Organizations
- Unit 42AnthropicProject Glasswing
- AI models
- Mythos
From the original article
3 min read at cyberscoop.com
Palo Alto Networks’ threat intelligence team said the early waves of threats riding on agentic AI models have broken in the wild, and organizations are unprepared for what’s coming next. Unit 42’s top brass has seen enough from internal frontier AI model testing and malicious in-the-wild use of commercially available AI tools to be genuinely concerned.
By @CyberScoopNews · cyberscoop.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.