AI-assisted assaults accessed techniques or retrieved knowledge at 10 organizations, in response to a November 12 investigation by Palo Alto Networks’ Unit 42. The safety analysis workforce tracked 25 operations in opposition to a minimum of 19 organizations throughout August and September 2026, together with semiconductor corporations, protection and coverage organizations, and civil-society teams.
Unit 42 mentioned the attackers used a personalized model of Cairn, an open-source framework for AI-driven penetration testing, paired with Zhipu GLM and DeepSeek fashions.
The reported outcomes went past reconnaissance. The researchers reported unauthorized entry to a semiconductor firm’s manufacturing system and to multiple million member data at a US academics’ union.
Attackers additionally modified a dwell standards-ballot doc and obtained nonpublic knowledge at an business requirements group, the researchers mentioned.
People set targets, brokers sustained the work
People equipped targets and objectives, typically including intelligence gathered beforehand. The framework then deliberate, executed and recorded subsequent work.
Particular person operations lasted from 20 minutes to greater than 50 hours, Unit 42 reported, with human steering nonetheless attainable.
People selected targets and will preserve steering whereas brokers repeated the intrusion work.
Marketing campaign outcomes are Unit 42’s findings. The diagram reveals the design, not measured human-intervention frequency. Operations and organizations are totally different items; no success price is inferred.
That association let people direct the marketing campaign whereas brokers sustained the intrusion work. Unit 42 assessed {that a} single operator or small workforce doubtless ran the exercise and argued that autonomous orchestration expanded the variety of simultaneous makes an attempt they might maintain.
Unit 42 concluded that AI elevated the dimensions and attain of the marketing campaign, not its technical sophistication.
The November 12 investigation provides quantified outcomes to earlier reporting on AI-assisted assaults. CryptoSlate’s November 5 protection of CERT-In’s CRAFTY FALCON advisory already named Cairn amongst AI-assisted offensive-security instruments. The experiences describe totally different noticed exercise; shared tooling doesn’t set up a hyperlink between their operators.
Unit 42 assessed with average confidence that the exercise it tracked represented China-nexus intelligence assortment, primarily based on language, tooling and goal choice.
For defenders, the report’s sensible warning is that acquainted gaps can help extended, coordinated intrusion makes an attempt. Unit 42 says identification hygiene, decreasing uncovered assault surfaces and software program patching stay efficient.
