What to know

• A human ransomware operator used frontier AI models to execute a complete attack in under 10 hours—typically a two-week operation for human teams—with AI agents autonomously handling reconnaissance, network access, credential theft, and cloud compromise.
• The attacker left behind an 80-page security audit documenting the victim's vulnerabilities, suggesting deliberate exposure of exploited weaknesses.
• Palo Alto Networks advocates AI-driven defenses as the only viable protection against machine-speed attacks, requiring enterprises to deploy AI agents to monitor and respond to threats in real time.

“Deploy automated playbooks that simultaneously revoke credentials, terminate OAuth sessions, freeze CI/CD pipelines and isolate cloud accounts across all operational planes.”

Palo Alto Networks, Security vendor recommendation · The Register · Sep 1

Unit 42 (Palo Alto Networks) Incident response teamUnnamed ransomware attacker Attacker