China-nexus groups moved even faster: VAULT PANDA and GENESIS PANDA launched deliberate attacks on critical web application vulnerabilities within 24 hours of public disclosure . CrowdStrike now measures the exploitation gap in hours rather than days .

AI-Enabled Attacks Surged 89%; AI Is Both Weapon and Target

CrowdStrike's data shows attacks by AI-enabled adversaries rose 89% in 2025, with over 90 organizations observed having their legitimate AI tools exploited to generate malicious commands and steal sensitive data . The average eCrime breakout time — the window between initial access and lateral movement — dropped to 29 minutes, with the fastest recorded breakout at just 27 seconds . This represents a 65% speed increase from 2024 .

Key trends driving this include:

• AI-driven vulnerability discovery and automated exploit development are now routine .
• Agentic AI is transforming cyberattacks from assisted to autonomous, with attackers using AI agents to operate at machine speed .
• Cloud-conscious eCrime activity surged 171%, as financially motivated adversaries pursued credentials, cryptomining capacity, and LLM access .
• Vishing (voice phishing) intrusions doubled .

North Korea-Linked Supply Chain Attack on Mastra AI

The CrowdStrike report identified that DPRK-nexus adversaries (North Korea-linked groups) poisoned 131 trusted AI framework packages, including injecting malicious packages into Mastra AI frameworks . This demonstrates how AI development pipelines themselves have become high-value targets for state-backed groups.

Dataminr: Patch Times vs. Breakout Times — A Widening Gap

Dataminr's 2026 Mid-Year Cyber Threat Landscape Report highlights a severe asymmetry between defense and offense :

• Median time-to-patch grew from 32 to 43 days since the start of the year, according to the 2026 Verizon DBIR .
• Meanwhile, the average attacker breakout time has dropped to under 30 minutes .
• Ransomware accounted for 25% of confirmed cyber-loss events .
• Vulnerability exploitation has overtaken stolen credentials as the top breach entry point for the first time .

The picture is stark: attackers move in minutes; defenders still need weeks or months to patch.

Cisco Talos: AI Guardrails Defeated by Simple Social Engineering

Cisco Talos published research at Black Hat showing that commercial AI safety controls are alarmingly easy to bypass :

• Simply claiming you own the servers you're targeting, or that you're participating in a capture-the-flag or bug bounty exercise, was often enough to get models to assist with cyberattacks .
• Beyond social engineering, criminals are splitting malicious work across multiple sessions and files, breaking projects into fragments small enough that no individual request appears harmful .
• Talos also found AI is now finding vulnerabilities faster than humans can patch them — discovery is no longer the bottleneck .

Defensive Vendor Announcements at Black Hat 2026

The conference saw the industry moving beyond "adding copilots" to embedding AI into operational security workflows :

• Xage Security announced identity-based microsegmentation, applying zero-trust principles at the workload level.
• SentinelOne, Cycode, and Miggo Security showcased autonomous security capabilities — AI-driven detection, investigation, and response that can operate at machine speed without human intervention .
• ESET expanded AI across threat detection, investigations, threat protection, and security operations .
• Flashpoint launched customizable AI-driven threat intelligence workflows .
• Microsoft framed its Black Hat agenda around defending trust in the age of AI and supply-chain attacks, noting attackers are "following trust" into software packages, build pipelines, cloud identities, and AI agents .

The Dual Role of AI: Threat Accelerator and Defensive Tool

The consensus across every major report at Black Hat 2026 is that AI is simultaneously a massive accelerant for attackers and an indispensable tool for defenders :

• On offense: AI enables automated exploit development, AI-driven vulnerability discovery, autonomous agentic attacks, AI-powered phishing at scale, and AI systems themselves are high-value targets .
• On defense: AI is being embedded into detection, investigation, response, threat intelligence, and identity-based microsegmentation to close the speed gap .

As one report summarized: "AI is on track to become part of the security team, part of the attack surface, and part of the problem all at once" . The fundamental challenge of 2026 is that attackers have already operationalized AI for speed and scale, while defenders are still racing to catch up against an adversary that now breaks out in minutes and exploits vulnerabilities in hours.

China-nexus groups moved even faster: VAULT PANDA and GENESIS PANDA launched deliberate attacks on critical web application vulnerabilities within 24 hours of public disclosure . CrowdStrike now measures the exploitation gap in hours rather than days .

AI-Enabled Attacks Surged 89%; AI Is Both Weapon and Target

CrowdStrike's data shows attacks by AI-enabled adversaries rose 89% in 2025, with over 90 organizations observed having their legitimate AI tools exploited to generate malicious commands and steal sensitive data . The average eCrime breakout time — the window between initial access and lateral movement — dropped to 29 minutes, with the fastest recorded breakout at just 27 seconds . This represents a 65% speed increase from 2024 .

Key trends driving this include:

• AI-driven vulnerability discovery and automated exploit development are now routine .
• Agentic AI is transforming cyberattacks from assisted to autonomous, with attackers using AI agents to operate at machine speed .
• Cloud-conscious eCrime activity surged 171%, as financially motivated adversaries pursued credentials, cryptomining capacity, and LLM access .
• Vishing (voice phishing) intrusions doubled .

North Korea-Linked Supply Chain Attack on Mastra AI

The CrowdStrike report identified that DPRK-nexus adversaries (North Korea-linked groups) poisoned 131 trusted AI framework packages, including injecting malicious packages into Mastra AI frameworks . This demonstrates how AI development pipelines themselves have become high-value targets for state-backed groups.

Dataminr: Patch Times vs. Breakout Times — A Widening Gap

Dataminr's 2026 Mid-Year Cyber Threat Landscape Report highlights a severe asymmetry between defense and offense :

• Median time-to-patch grew from 32 to 43 days since the start of the year, according to the 2026 Verizon DBIR .
• Meanwhile, the average attacker breakout time has dropped to under 30 minutes .
• Ransomware accounted for 25% of confirmed cyber-loss events .
• Vulnerability exploitation has overtaken stolen credentials as the top breach entry point for the first time .

The picture is stark: attackers move in minutes; defenders still need weeks or months to patch.

Cisco Talos: AI Guardrails Defeated by Simple Social Engineering

Cisco Talos published research at Black Hat showing that commercial AI safety controls are alarmingly easy to bypass :

• Simply claiming you own the servers you're targeting, or that you're participating in a capture-the-flag or bug bounty exercise, was often enough to get models to assist with cyberattacks .
• Beyond social engineering, criminals are splitting malicious work across multiple sessions and files, breaking projects into fragments small enough that no individual request appears harmful .
• Talos also found AI is now finding vulnerabilities faster than humans can patch them — discovery is no longer the bottleneck .

Defensive Vendor Announcements at Black Hat 2026

The conference saw the industry moving beyond "adding copilots" to embedding AI into operational security workflows :

• Xage Security announced identity-based microsegmentation, applying zero-trust principles at the workload level.
• SentinelOne, Cycode, and Miggo Security showcased autonomous security capabilities — AI-driven detection, investigation, and response that can operate at machine speed without human intervention .
• ESET expanded AI across threat detection, investigations, threat protection, and security operations .
• Flashpoint launched customizable AI-driven threat intelligence workflows .
• Microsoft framed its Black Hat agenda around defending trust in the age of AI and supply-chain attacks, noting attackers are "following trust" into software packages, build pipelines, cloud identities, and AI agents .

The Dual Role of AI: Threat Accelerator and Defensive Tool

The consensus across every major report at Black Hat 2026 is that AI is simultaneously a massive accelerant for attackers and an indispensable tool for defenders :

• On offense: AI enables automated exploit development, AI-driven vulnerability discovery, autonomous agentic attacks, AI-powered phishing at scale, and AI systems themselves are high-value targets .
• On defense: AI is being embedded into detection, investigation, response, threat intelligence, and identity-based microsegmentation to close the speed gap .

As one report summarized: "AI is on track to become part of the security team, part of the attack surface, and part of the problem all at once" . The fundamental challenge of 2026 is that attackers have already operationalized AI for speed and scale, while defenders are still racing to catch up against an adversary that now breaks out in minutes and exploits vulnerabilities in hours.