An AI-Assisted Cyber Attack: Inside a Unit 42 Investigation
Palo Alto Networks, Wednesday, September 2nd, 2026
Unit 42 reconstructs an intrusion where autonomous AI agents let an attacker breach an enterprise network within hours.
Unit 42 walks through an incident response engagement in which an attacker used autonomous AI agents to compress the intrusion lifecycle from days into a matter of hours.
The write-up reconstructs how the agents handled reconnaissance, exploitation and lateral movement steps that would normally require sustained human effort.
Palo Alto Networks uses the case to argue that agentic attacks change defender assumptions about dwell time and response windows. The post closes with guidance on detecting and defending against this class of AI-driven operation.