AI-Enabled Cyberattack

AI-enabled cyberattacks are intrusions, fraud, or malware campaigns in which attackers use artificial intelligence to plan, scale, or disguise their work, such as generating convincing phishing emails, cloning a executive's voice for payment fraud, or finding software flaws faster than defenders can patch them. For enterprise risk teams, the concern is that these attacks lower the cost and skill needed to target a company, which raises the likelihood of incidents and can trigger breach-notification duties and regulatory scrutiny under frameworks such as the EU AI Act and data protection laws. Governance programs should treat this tag as a signal to review fraud controls, verification procedures for payment and identity requests, and how AI tools in their own environment could be misused or exposed.

1 item

ResearchGlobal2026-11-12

25 Autonomous AI Intrusions Hit 19 Orgs Using Cairn, Zhipu GLM, and DeepSeek

Palo Alto Networks Unit 42 documented 25 autonomous AI-driven intrusion operations against 19 organizations, observed in August and September 2026. Attackers used an open-source penetration-testing framework called Cairn, paired with Chinese AI models Zhipu GLM 5.2 and DeepSeek V4. They breached 10 organizations, stole credentials and records, created unauthorized administrator accounts, and overwrote a live industry-standards ballot. The campaign was attributed to Chinese-speaking operators who may have run all 25 operations with minimal staffing, hitting 19 organizations over roughly two weeks.

AI-enabled cyberattack autonomous attack agents Zhipu GLM DeepSeek threat intelligence agentic AI enterprise risk data integrity