Browse
Reference
Directory
Company
Help & Legal
Follow
Subscribe
Quick Take
AI-assisted attacks accessed systems or retrieved data at 10 organizations, according to a November 12 investigation by Palo Alto Networks' Unit 42. The security research team tracked 25 operations against at least 19 organizations during August and September 2026, including semiconductor companies, defense and policy organizations, and civil-society groups.
Unit 42 said the attackers used a customized version of Cairn, an open-source framework for AI-driven penetration testing, paired with Zhipu GLM and DeepSeek models.
The reported outcomes went beyond reconnaissance. The researchers reported unauthorized access to a semiconductor company's production system and to more than one million member records at a US teachers' union.
Attackers also modified a live standards-ballot document and obtained nonpublic data at an industry standards organization, the researchers said.
Anthropic’s Claude helped 3 researchers breach OpenAI in under 72 hours
Humans set targets, agents sustained the work
Humans supplied targets and goals, sometimes adding intelligence gathered beforehand. The framework then planned, executed and recorded subsequent work.
Individual operations lasted from 20 minutes to more than 50 hours, Unit 42 reported, with human steering still possible.
Humans direct. Cairn sustains the work.
Activity: August–September 2026. Report: November 12, 2026. Unit 42 describes human-directed AI intrusions with continued steering possible.
Humans chose targets and could keep steering while agents repeated the intrusion work.
Campaign outcomes are Unit 42's findings. The diagram shows the design, not measured human-intervention frequency. Operations and organizations are different units; no success rate is inferred.
Sources
Supporting facts
Method
Conceptual workflow from Unit 42's description and Cairn's documentation. Arrows show task and information flow, not measured timing. Counts reproduce the report and use distinct units; no ratio or general success rate is calculated.
Scope
That arrangement let humans direct the campaign while agents sustained the intrusion work. Unit 42 assessed that a single operator or small team likely ran the activity and argued that autonomous orchestration expanded the number of simultaneous attempts they could sustain.
Princeton University discovers AI agents breaking safety rules because of past user ‘memories'
Unit 42 concluded that AI increased the scale and reach of the campaign, not its technical sophistication.
The November 12 investigation adds quantified outcomes to earlier reporting on AI-assisted attacks. CryptoSlate's November 5 coverage of CERT-In's CRAFTY FALCON advisory already named Cairn among AI-assisted offensive-security tools. The reports describe different observed activity; shared tooling does not establish a link between their operators.
India warns AI-assisted hackers are stealing crypto wallet keys
Unit 42 assessed with moderate confidence that the activity it tracked represented China-nexus intelligence collection, based on language, tooling and target selection.
For defenders, the report's practical warning is that familiar gaps can support prolonged, coordinated intrusion attempts. Unit 42 says identity hygiene, reducing exposed attack surfaces and software patching remain effective.
Microsoft found a way to turn a helpful AI into a sleeper agent
Cookie Consent
We use cookies to improve your experience on our site. By using our site, you consent to cookies.
Cookie Preferences
Manage your cookie preferences below:
Essential cookies enable basic functions and are necessary for the proper function of the website.
CloudFlare provides web performance and security solutions, enhancing site speed and protecting against threats.
Service URL: developers.cloudflare.com (opens in a new window)
Google Analytics is a powerful tool that tracks and analyzes website traffic for informed marketing decisions.
Service URL: policies.google.com (opens in a new window)
Statistics cookies collect information anonymously. This information helps us understand how visitors use our website.
Clarity is a web analytics service that tracks and reports website traffic.
Service URL: clarity.microsoft.com (opens in a new window)
You can find more information in our Privacy Policy and .
Loading image…
This image could not be loaded.
The Catalyst
