Agentic AI Helps Hackers Level Up, Even Without Detailed Instructions
Cybersecurity Dive, Thursday, October 22nd, 2026
CrowdStrike documents threat actors running agentic AI campaigns and finds token budgets, not engineering skill, limit AI-run intrusions.
CrowdStrike Intelligence reports several 2026 incidents in which threat actors used AI agents to make decisions and execute commands, not just to write tooling.
The report profiles four actors, two using sophisticated AI harnesses and two using simple ones; even the simpler setups breached numerous organizations.
CrowdStrike concludes that the main barrier to scaling AI-orchestrated intrusions is token budgets rather than engineering complexity.
It warns that low-skilled attackers will become more dangerous over the next year and that businesses must modernize defenses to keep up with faster, longer-running automated attacks.