AI AGENTS HELP COMPRESS RANSOMWARE INTRUSION TO UNDER 10 HOURS, RAISING STAKES FOR CISOS

Summary from the TLDR InfoSec newsletter

A ransomware operator crossed an enterprise network in under 10 hours using AI agents, work Unit 42 estimated would have taken human hands roughly two weeks. The 50-plus ATT&CK techniques observed were unremarkable on their own, and analysts quoted here read the intrusion as human-directed, with AI handling delegated tactical work rather than anything approaching autonomy. The more durable observation is about transitive authority, where a repository account with no cloud admin rights can still alter a workflow that assumes a privileged cloud role, which is the gap that made speed matter.